Acrobat Reader Plug-in Vulnerability

Article View: adobe.reader

Article #10087

#10087

From: Michael_Calabrese
Date: Fri, 05 Jan 2007 18:45

1 lines
1220 bytes

We are aware of the widely publicized security vulnerability in the Acrobat Reader Plug-in for Internet Explorer. We have applications that rely on the availability of this functionality so disabling it isn't an option for us. We have not completed testing Acrobat Reader 8 at this time so we are reluctant to deploy it across our corporation. We downloaded Acropdf.dll ver 7.0.9 from the Adobe site and deployed it to mitigate the risk in AR version 7.0.8 while we are testing version 8 of Acrobat Reader. Are we still at risk for the cross site scripting vulnerability?

Technical Details

Message-ID: <3bc2c239.-1@webcrossing.la2eafNXanI>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!newspeer1.nwr.nac.net!newsfeed.freenet.de!news.albasani.net!news.isoc.lu!webcrossing

Show Full Headers

Complete Article Headers

X-Google-Thread: 10273d,ae38b91a935bc9f,start
X-Google-Attributes: gid10273d,public
X-Google-Language: ENGLISH,ASCII-7-bit
From: Michael_Calabrese@adobeforums.com
Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!newspeer1.nwr.nac.net!newsfeed.freenet.de!news.albasani.net!news.isoc.lu!webcrossing
Newsgroups: adobe.reader
Subject: Acrobat Reader Plug-in Vulnerability
Message-ID: <3bc2c239.-1@webcrossing.la2eafNXanI>
Date: Fri, 5 Jan 2007 10:45:02 -0800
Lines: 8
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit