Adobe Acrobat and Reader under attack with a zero-day exploit

By Fahmida Y. Rashid September 9, 2010

Adobe identified a critical vulnerability in Adobe Acrobat and Reader on Tuesday, but said today that attackers were already exploiting this bug. All versions of Acrobat and Reader 8 and 9 for Windows, Macintosh, and Unix are open to attack. Even the latest versions, 8.2.4 and 9.3.4 are not safe. Other PDF reading alternatives, such as Foxit Reader, are not affected.

Masquerading as a harmless PDF file, this exploit has malformed font and image files. Spreading as an e-mail attachment to innocent-sounding emails, the PDF saves and runs an executable file to disk when it’s opened. A variation of the email offers tips on ways to improve your golf game. Security firm Trend Micro spotted a variation with a Trojan, TROJ_PIDIEF.WM, that downloaded two other Trojans called TROJ_DLOADR.WM and TROJ_CHIFRAX.BU.

This vulnerability bypasses Windows 7’s vaunted security measures. The executable file that gets saved carries a valid digital signature, so Windows 7 allows the operation. Because a valid signature pretty much tells Windows 7 that it’s a safe file, this executable is free to download more malicious code from a server at academyhouse.us. According to Kaspersky Lab, the file appears to be form Vantage Credit Union in St. Louis. It also piggybacks on loopholes created by applications that haven’t included Windows 7’s ASLR security technology in their own code.

Adobe “is in the process of evaluating the schedule for an update to resolve this vulnerability,” and hasn’t announced any fixes or patches. The regularly scheduled patch date is Oct. 13, but an emergency patch is not out of the question.

There are reports that turning off JavaScript in Adobe Reader stops the PDF file from executing. This is only a temporary measure, as attackers can tweak the exploit to issue variations that are immune to disabling JavaScript.

Editors' Recommendations

Microsoft overlooks four Stuxnet zero-day bugs in Patch Tuesday

Topics

Fahmida Y. Rashid

Former Digital Trends Contributor

Computing

Best Chromebook deals: Get a new laptop for just $169

The new Lenovo Chromebook Duet 5 sitting on a desk.

Chromebooks are more than just budget alternatives to Windows-based laptop deals. These Chrome OS-powered devices offer quick boot times, excellent productivity support, and full access to the Google Play Store, so they're perfect for those who need a mobile workstation. They range from ultra cheap options that still provide smooth performance because of the reliance on cloud-based apps instead of installed software, to more powerful and stylish machines that maximize the operating system's capabilities. You can also enjoy significant savings if you're patient enough to search for the best Chromebook deals.

There's no shortage of offers from retailers that involve Chromebooks, but since they're in high demand, it's recommended that you proceed with the purchase immediately if something catches your eye. To help you out, we've rounded up some of the best Chromebook deals that you can shop right now -- surely one of these will meet your needs and budget.
Today's best Chromebook deals
Acer Chromebook 314 -- $169, was $269

Computing

Best laptop deals: Get a new laptop for work or play from $169

ifa 2019 acer announces new line of chromebooks chromebook 314 cb314 1h 1ht 08

A new laptop can be an important investment, so you want to be sure you get the right laptop for your needs and the right laptop for your budget. There’s no single laptop that perfectly accommodates everyone, which is why we’ve rounded up details on several laptops among the best laptop deals currently available. From Apple laptops to PCs and from large laptops to Chromebooks, we’ve got everything you need to know to save on a laptop that works for you.
Acer Chromebook 314 — $169, was $269

The Acer Chromebook 314 is a great Chromebook made to suit the computing needs of just about anyone. It’s great in a tight spot like a classroom or a coffee shop, as it’s super light and fits in just about any bag or backpack. But it’s also a great device for settling in with at a desk and diving into hours of office work. It comes with an Intel processor and a 14-inch Full HD touchscreen display, and even when you’re pushing it to the brink of its capabilities the Chromebook 314 is able to sustain all-day battery life. Like all of the best student Chromebooks, the Acer Chromebook 314 is an impressive device that combines computing capability with affordability.

Computing

How to clean a laptop fan

Cleaning a laptop fan with air blower.

Let's face it: Laptops get dirty. That's true on the exterior, where sweat and grime can accumulate. The good thing is, is that it's obvious when a proper cleaning is in order. But what about inside a laptop? That gets dirty as well, as a laptop's thermal system works to pull air in to keep things cooled down. Inevitably, dust and other particles get sucked inside and accumulate around the fans.