11 Jul 2005 | Print  |

Acrobat Vulnerabilities Fixed

by Adam C. Engst

Acrobat Vulnerabilities Fixed -- Adobe has released Adobe Reader 7.0.2 and Adobe Acrobat Standard/Professional 7.0.2 for the Macintosh, in part to fix a pair of security vulnerabilities and to improve form handling. In one vulnerability, a malicious JavaScript embedded within a PDF file could launch an arbitrary application on your Mac, at least as long as the exact application and path name is known in advance by the attacker. In the second vulnerability, the updater for Adobe Reader and Acrobat could either elevate the permissions of a pre-existing Safari Frameworks folder or create such a folder with elevated permissions.

<http://www.adobe.com/support/techdocs/ 331709.html>
<http://www.adobe.com/support/techdocs/ 331711.html>

The free 7.0.2 updaters work only on version 7.0.1; if you haven't already updated from 7.0 to 7.0.1, you must do so before updating to 7.0.2. You can either download the updates manually from the URLs below or use the Check for Updates Now command in the Help menu of each program, after which the Adobe Update Manager application will download and install the update automatically. The Adobe Reader update is an 11.2 MB download; the Acrobat Standard/Professional downloads check in at 99.6 MB. [ACE]

<http://www.adobe.com/support/downloads/ product.jsp?product=10& amp;platform=Macintosh>
<http://www.adobe.com/support/downloads/ product.jsp?product=1& amp;platform=Macintosh>

-

Top Articles in this Section

• Five iTunes 7.7.1 Bug Fixes Detailed (31 Jul 08)
• iTunes 7.7 Corrupts Accented Artist and Track Names (24 Jul 08)
• iTunes 7.7 Released in Preparation for iPhone 2.0 (10 Jul 08)

Bare Bones Software's BBEdit 8.7 -- Latest version offers a
major interface overhaul, new prefs, text clippings, improved
JavaScript, new Ruby/SQL/YAML/Markdown support, code folding.
Over 160 new features in all! <http://www.barebones.com/>.