Adobe
Adobe has been slow to patch the flaw in Adobe Reader

Researcher builds home-made Adobe patch

Beats the company by weeks

Iain Thomson in San Francisco

A researcher at threat management firm Sourcefire has published a home-made patch for the flaw that Adobe warned about on Friday.

Adobe had said that it would take until 11 March to build a patch for the flaw in Adobe Reader and Acrobat, which allows remote code execution on targeted systems. The firm said that hackers were already using the attack.

Advertisement

But Lurene Grenier, a senior research engineer with the Sourcefire Vulnerability Research Team, has created her own patch, which she says should work on Windows systems.

"People seemed a bit worried about the Adobe Reader bug, so I figured I'd take a bit of time this morning and create a home-brew patch for people to protect themselves until 11 March rolls around," she wrote on the company blog.

"I made this patch using only windbg and a crappy hex editor because I'm at home now. It may not prevent all attacks on jbig2 - it WILL prevent all current attacks using the method I described, but there may be others. No warranty expressed or implied, etc etc."

The patch will be something of an embarrassment to Adobe, which has been criticised by some for its slow response to the threat.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Adobe

Adobe warns of PDF threat

Attacks target flaw in Reader and Acrobat

Adobe Flash

Adobe gets Flash at Mobile World Congress

Firm tries to make its mobile Flash offerings more like the desktop experience

Adobe AIR reaches 100 million installations

Major milestone for popular runtime technology

Adobe to open up Flash streaming protocol

Content developers will have access to RTMP specifications

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Windows 7

Microsoft denies Windows 7 battery problems

Replacement warning functioning normally, claims software giant

Safer Internet Day

Safer Internet Day highlights online threats

Annual initiative warns of phishing, ID theft and social network...

AMD Fusion

AMD details Fusion innovations at ISSCC

Forthcoming chip with four CPU and one GPU cores will...

MSI Wind U135

Review: MSI Wind U135 netbook

A decent netbook incorporating the latest Intel technology in a...

Primary Navigation