Adobe’s Zero-day Flaw

March 6, 2009

Yesterday, while visiting a Microsoft business client of Onsite Computer Services in New Orleans, we discovered a few Microsoft PCs with the ubiquitous Adobe reader that were infected with the zero-day flaw.

The vulnerability affects Adobe versions 9 and earlier and exploits corrupt arbitrary memory by way of a special PDF fileAdobe has thus far failed to issue a patch to address the Adobe flaw; however there are a few preventative measures you can take to protect your systems from this malware.

– Disable JavaScript in Adobe Reader only works against some exploits and does not resolve the underlying issue.

– Set your browser to not automatically open PDFs: The current versions of Internet Explorer and Mozilla Firefox automatically open PDFs by default.

A good, updated antivirus should provide a sufficient level of protection from this exploit.  The following measures can further protect your system:

Be wary of PDF files from unknown or untrusted sources – users should avoid opening up PDF files if they are suspicious.

– Consider enabling DEP (Data Execution Prevention) for Adobe Reader.

In addition to these, Sourcefire has created a homemade patch to serve as a band-aid until Adobe releases a fix for the issue. The Sourcefire patch can be downloaded here.

Officials at Adobe plan to make an update for Adobe Reader 9 and Acrobat 9 available by March 11. In addition, Adobe is planning to make updates available for Adobe Reader 7 and 8 and Acrobat 7 and 8 by March 18.

If you’re searching for New Orleans computer service or repair of your Microsoft based system or network, then call the Microsoft specialists at 504-469-6991. Onsite Computer Services, Inc. in New Orleans

You may also be interested in Onsite Computer’s Blog.

This New Orleans On-Site Computer Service post was provided by Eli Lucas. Eli can be reached at Onsite Computer serves the Microsoft computing needs of small businesses throughout the Greater New Orleans area including Uptown, Lakeview, Broadmoor, Mid-City, Metairie, Jefferson, Kenner, Westbank, French Quarter, and the Warehouse District. Please visit our website for New Orleans Computer Service.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: