Newsletters Welcome, Guest Log In | Register

SMB Tech

Expert tech insight and advice for small businesses with big goals

About this Blogger RSS

Subscribe

Sign up now and get the best business technology insights direct to your inbox.

  • Daily Edge
  • CTO Edge Update
  • Business Tools & Templates
  • Aligning IT & Business Goals
  • Maximizing IT Investments

0

Adobe Reader Plagued by Yet Another Security Flaw

Posted by Paul Mah Apr 30, 2009 6:03:06 AM

Yet another security flaw has been uncovered in Adobe Reader, probably the most popular reader software on the planet for PDF files. Adobe is currently working on a new release to address this problem. Because Adobe does not yet have a time frame for this, the advice from security experts for companies using Acrobat Reader is to disable JavaScript in order to mitigate this specific vulnerability.

 

An advisory from US-CERT outlined the steps needed to disable JavaScript for Adobe Reader: "Open the General Preferences dialog box. From the Edit-Preferences-JavaScript menu, uncheck 'Enable Acrobat JavaScript.'"

 

At this point, I want to take the opportunity to encourage SMBs to seriously think about making a permanent switch to other non-Adobe PDF readers. While it would be downright foolish to equate switching from Adobe Reader with better security, the fact is that hackers have been concentrating on the widely installed Adobe Reader software in order to achieve the best returns for their illegal activities.

 

Unfortunately, not all small and medium-sized businesses can afford to spare the time and personnel to constantly monitor the security situation of all the software that they are using. Given the historical interest in exploiting Adobe Reader, a switch to another PDF reader application will go a long way to reduce the chances of being the next victim of a zero-day exploit - and eliminating some of the sleepless nights for the system or security administrator.

 

Indeed, you will be interested to know that F-Secure Chief Research Officer Mikko Hypponen gave the same recommendation when he spoke at RSA Conference recently, pointing out that more than 47 percent of targeted attacks exploit holes in Acrobat Reader.

 

Incidentally, I recently wrote about a new free alternative to Adobe Reader that I have been using for over two years now. Feel free to check it out as a permanent replacement for Adobe Acrobat.

 

SMBs looking at other options - even open source - will want to check out PDFreaders.org.

Add a comment Leave a comment on this blog post.

There are no comments on this post

Software Forum: Information On Demand Virtual Experience

This interactive virtual forum presents leading IT experts providing the insights you need to turn your information into a strategic driver for innovation, business optimization and competitive differentiation.

Performance Under Pressure: The State of Enterprise Web Application Quality and Availability

This research study finds that Web application issues are an all-too-common problem and examines these Web-based enterprise application issues from two perspectives: that of an online customer and that of a site manager.

Data Center Management

Indispensable technologies and best practices to maintain your organization's most valuable asset.

Mobile Computing Optimization

Mobile computing solutions, tips, and expert commentary that increases the usability and bottom-line benefits of your mobile computing assets.

Application Grid

Learn more about this middleware layer that pools and dynamically provisions infrastruction application delivery resources to lower costs and improve efficiency.

Business Intelligence

Best-practice tools, strategies and technologies for determining and managing the data you need to make better business decisions.

ITIL V3 Foundation - Complete Certification Kit

Enhance your IT career by getting your ITIL Foundation Certificate. It's fast and easy with this complete resource. The 186-page eBook and companion online training course is guaranteed to help you pass the ITIL exam.

Learn more >

Windows 7 Upgrade Project Kit

Moving to Windows 7? The Windows 7 Upgrade Project Kit is the ideal support tool for managing all phases of an organizational upgrade to Windows 7. The tools and templates in this kit will help you develop a strategy and map out the implementation tactics which link your Windows 7 deployment to your company's bottom line.

Learn more >