Critical Adobe PDF Flaw Affects IE

By Nate Mook | Published November 30, 2006, 3:31 PM

Adobe on Thursday acknowledged in a security advisory that critical security vulnerabilities have been found in its Acrobat and Adobe Reader programs. The issue affects versions 7.0.0 through 7.0.8, and the company says it is working on a fix.

Acrobat and Reader 8.0, which will be available soon, are not impacted by the issue. According to Adobe, the problem lies in an ActiveX control used by Internet Explorer. Other browsers are not affected, although Adobe recommends manually removing the AcroPDF.dll plug-in file as a workaround until an update is available for download.

Comments

Folks not using IE are not vulnerable to this bug, but are being asked to delete a .dll file anyway? This seems like pretty bad advice. Just another reason not to use IE seems more like the better workaround! What I find annoying about Acrobat 7 Pro, besides the fact that it's bloatware and you can't control which feature sets to install, is that it corrupts normal.dot in word if you install the office plugin. I also think it's madness that they still don't have any integration with Firefox! I use pdfFactory Pro to print searchable pdf files from Firefox. Actually, for most pdf print jobs it's amazing with its small file sizes and its incredible speed. Obviously it's not a reader though.

Score: 0

|

if you just want a reader, do yourself a favor and d/l foxit. It's light and much faster

Score: 0

|

Agreed. Foxit does or did have some printing issues, but I rarely print anything and never print PDF at all, so those were non-issues to me. If you really just need/want a READER, you'll be much better off putting the behemoth that is Abobe in the recycle bin.

Score: 0

|

Great so other than the occasional printing, viewing, rendering issues, foxit rocks. *rollseyes*

Score: 0

|

Use it. Its shortcomings are much smaller than acrobat.

Score: 0

|

I do use it, but I find acrobat the more consistent and trouble-free program. Look, the first time you print something out in color using foxit, and it's for a presentation due in 10 minutes for the shareholders of your company that each bill out at $400+/hour rate, and it comes out splotchy and you don't have time for fun and games, you'll value adobe's printing, rendering engines.

If all you are doing are looking at manuals or anything noncritical, fine, play with your toys. The rest of us need the rock solid ability to do lots of things with PDF's. I don't like some of the directions adobe has taken it, but they do have the ability to read, display, validate, print pdf's down pat, finally, in version 8.

Score: 0

|

Fine, so for you, Adobe would seem like the genuinely better choice, and therefore, as you should under that particular set of circumstances, you use it. Most folks aren't under that set of circumstances, though, and as such, may do very well with a different choice.

Score: 0

|

I assume you're saying you prefer Acrobat over Foxit, not Reader, right? Because if anyone has had experiences similar to me, they wouldn't use the words "rock solid" and "adobe" when talking about pdf files.

Score: 0

|

I'm curious why "most folks" would want less performance and ability when the cost (zero) is the same?

Score: 0

|

performance to me is "reliability." If the thing don't work, it's "performance" is meaningless.

Acrobat is more reliable than foxit in any professional environment that depends on accurate PDF viewing, printing, reproduction, workflow. Period. You don't believe me look over at foxit's forums: the people there have problems with the program. Look over at adobe's forums: the people have problems with individual PDF's and activation (yuk, I'll admit) but the program itself works...

Acrobat Version 8, finally, will validate for proper PDF compatibility, and will allow you to repair PDF's that are made by shoddy third party programs. This is a good thing.

Score: 0

|

Agreed. Adobe REALLY sucks at writing software and as a company in general. I won't go into all the trouble we have here at my company with them. Let just say, try getting a hold of their support and you will see what I mean.

Score: 0

|

You mean Adobe HAS a support department?

Talking to Adobe is like trying to contact aliens. I use several Adobe products and have found it far better to contact fellow users to get answers than to try Adobe. Their knowledgebase is often a joke. Like many software houses these days, Adobe is far more interested on sales than after-sales.

Score: 0

|

Before it can tackle Windows, Chrome must leave Safari in the dust

It's a little browser with dreams of becoming a bigger operating system some day. But while it's chasing Microsoft's dreams, Chrome's tail is being chased by Apple.

Silverlight 3 goes live on Microsoft's servers

Microsoft's answer to Adobe's Flash is (unofficially) here, with prospects of higher-speed, higher-resolution video and for the first time, 3D.

Best Buy-brand TVs to get TiVo

A new alliance will place the retailer's own brand alongide the manufacturers, and could also lead to future partnerships on services.

Three Android phones on the way from T-Mobile in 2009

T-Mobile's myTouch 3G, launched Wednesday, will be followed by two more Android phones later this year, but neither of them will be HTC's Hero.

LTE still lacks a voice

The 4G Wireless standard that Verizon hopes to show off before this year is out is still at a loss for (spoken) words.

T-Mobile's strategy to combat Apple's iPhone with Android

With a trio of Android phones now in the pipeline for 2009, T-Mobile hopes to break the iPhone's emerging stranglehold.

EC's Reding: Government should act as broker for media downloads

If Internet media services don't step up and build an attractive way for users to start paying for downloads, a commissioner says, government may do the job instead.

Sony TVs get Netflix, still no PS3

Though it's coming in behind LG, Samsung, and Microsoft, Sony will begin to offer Netflix streaming, too.

Google Chrome OS: Too little, too early

Carmi Levy: Wide Angle Zoom Don't start the revolution just yet, says Carmi, who isn't so certain Chrome OS will be the "Windows Killer."

GAO pen test brings the hammer down on federal rent-a-cops

But are the computers to blame for the contract-guard fiasco at FPS?

What's Next: Chrome OS will have at least some friends in high places

Also: South Korea takes another round of DDoS abuse, and Neelie Kroes and Steve Ballmer may shake hands before she exits stage left.

Data sharing among online advertisers: Is sanity in sight?

Lockdown with Angela Gunn In the middle of a 15-page plea not to get regulated, a spark of smart thinking.

PST Recovery Software 12.0

July 9 - 11:34 PM ET

Unistal Data Recovery 12.08.06

July 9 - 11:09 PM ET

BKF Repair 3.0

July 9 - 10:54 PM ET

Vuze for Windows 4.2.0.4

July 9 - 6:26 PM ET

UltraVNC 1.0.6.4

July 9 - 6:05 PM ET

WildBit Viewer 5.5 Beta 3.0

July 9 - 5:44 PM ET