Adobe announces update for Acrobat, Reader vulnerability

[dwarakesh]

Adobe Systems Incorp, California based computer Software Company has announced that it will release an update for a newly-reported vulnerability in on all platforms by May 12th.

Last week, the company acknowledges the first of two vulnerabilities and said the updates will cover Windows versions of Acrobat and Reader 9.x, 8.x and 7.x, and UNIX and Mac versions 9.x and 8.x.

Adobe also has confirmed the second vulnerability, but they are still investigating this issue and will confirm it only after it will exploitable on UNIX. The researcher who reported the vulnerability only claimed to have tested on Linux.

If user wants to mitigate the vulnerability, he can do so by disabling JavaScript in Acrobat or Reader. To disable JavaScript in the Reader or Acrobat follow these instructions:
   1. Launch Acrobat or Adobe Reader.
   2. Select Edit>Preferences
   3. Select the JavaScript Category
   4. Uncheck the 'Enable Acrobat JavaScript' option
   5. Click OK

source: itvoir