Adobe patches vulnerability in Reader and Acrobat

Over the weekend, Adobe released updates for its Reader and Acrobat products for Windows, Mac and Unix. The updates fix critical security vulnerabilities relating to Flash content which affect not only Flash Player, but can also be exploited to inject and execute malicious code through the vendor's PDF applications. A number of anti-virus software vendors report that attackers are already actively exploiting the vulnerabilities to infect Windows PCs with malware.

Users should update Adobe Reader to version 9.1.3 using the automatic update function. Users installing a new version of Reader should note that Adobe currently only has version 9.1 available as a download for Windows – users downloading this version should ensure that they then update to version 9.1.3.

Linux users can download version 9.1.3 directly and do not need to perform a further update. Adobe Acrobat users need to download a completely new version for Windows or Mac.

See also:

• Adobe fixes numerous holes in Flash Player and AIR, a report from The H.
• Zero-day vulnerability in Adobe Flash Player, Reader and Acrobat, a report from The H.

(crve)