ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Adobe patches Mac security flaws

Joris Evers CNET News.com

Published: 29 Jun 2005 13:00 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Adobe has updated its Adobe Reader and Adobe Acrobat for Apple's Mac OS to version 7.0.2. The updates fix two vulnerabilities. The first flaw lies in the way the applications process JavaScript tags embedded in PDF files, according to Adobe. An attacker could launch executable programs on the victim's system by crafting a malicious PDF file. The attacker would have to know the exact location of the executable, Adobe said in an advisory released on Monday.

The second flaw is in the updater for Acrobat and Reader. Folder permissions in Safari Frameworks are elevated when downloading, which could be exploited by an attacker, Adobe said in a second advisory. Safari is Apple's Web browser. Security researchers with the French Security Incident Response Team rate the issues "medium" risk, which means they could be exploited remotely and locally, leading to a denial of service or an escalation of privileges.

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
79 out of 160 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:












Related Jobs

Security Consultant Ethical Hacking / Penetration Testing - London

Responsibilities: - Deliver security assessment services including network scanning, vulnerability testing, penetration testing, search engine ...

SUPPORT ANALYST- 1st/2nd Line Support- Essex- 25k

An understanding of IT Operational Support Frameworks, including incident management, problem management, change control, service level measurement ...

Web Developer (JavaScript, AJAX, JavaScript, Web Developer) London

Experience of frameworks such as Prototype, jQuery, Mootools, Scriptaculous or YUI and Web standards, W3C, accessibility, semantic markup ...

Sentry Posts Blog

Mobile Linux Better For Mobile Busines...

Mobile Linux Better For Mobile Business Apps? Author: Eric Everson, MyMobiSafe.com As mobile Linux is carving it’s footprint on the future of mobile application development, the... More

Post a comment

DWP downplays security breach

The Department for Work and Pensions (DWP) has admitted that some of its staff have been forwarding passwords with password protected material. An email that was leaked on the 'Dizzy... More

Post a comment

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation