Adobe Acrobat Reader
The attacks target a flaw in the way Acrobat handles PDF files

Web attacks target PDF flaw

Users urged to patch Acrobat hole

Shaun Nichols in California

Security researchers are warning users to upgrade their version of Adobe's Acrobat Reader following reports of new vulnerabilities.

The attacks target a flaw in the way Acrobat handles PDF files within Internet Explorer which could allow an attacker to remotely execute code.

Advertisement

Adobe released a patch for the vulnerability on Wednesday. However, security firm Sans Institute reported on Friday that it had discovered malicious banner ads which exploit the flaw.

The banner ads install Trojan files which delete any competing malware on the user's system.

Sans Institute traced the ads back to a hosting service in The Netherlands, which has since been notified and has removed the malicious files.

Greg McManus, a researcher with iDefense Labs, was credited with discovering the flaw, which was disclosed to Adobe in October last year.

IDefense reported that the malicious PDF files being used in the attack are currently undetectable by most antivirus programs. The company has provided a number of vendors with samples.

Users are urged to upgrade Adobe Acrobat Reader to version 8.1.2, which patches the vulnerability and prevents the attack being launched.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Virus

Mayday worm takes on Storm

Hackers after botnet crown, researchers warn

Storm malware still blowing strong

One year on and no sign of fading away

Experts warns of Banker Trojan peril

Primary threat to online shoppers this Christmas

Adobe wins backing for PDF 1.7

Next version of document format set to become ISO 32000 Standard

Related whitepapers

Related jobs

Most watched

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation