Adobe releases security updates for Reader, Acrobat

On Monday, Adobe released a security update for a serious vulnerability within Reader and Acrobat. The vulnerability described in CVE-2008-2641 is being circulated on the Internet. Adobe says if exploited the vulnerability could crash applications and could allow an attacker to take control of the affected system.

The update affects Adobe Reader 8.0 through 8.1.2, Adobe Reader 7.0.9 and earlier, Adobe Acrobat Professional, 3D and Standard 8.0 through 8.1.2, Adobe Acrobat Professional, 3D and Standard 7.0.9 and earlier. It does not affect Adobe Reader 7.1.0 and Acrobat 7.1.0.

[hays33d]

Anyone know what files or registry keys this actually changes? The two files I gauge whether Reader has been updated doing an inventory is the exe and the main dll, acrord32.dll. Both of those files remained unchanged after this patch.

Thanks.

PS: Adobe's web site is useless as usual.

[mhinnewyork]

I blogged about how you can verify that the patch was installed. This patch is unusual in that, if you start with version 8.1.2 and apply the patch, a standard Help -> About still shows version 8.1.2. According to Adobe you have to do Help -> About Adobe Plug-Ins -> Comments and look for a date on the API file of 6/7/2008. For more see
http://news.cnet.com/8301-13554_3-9979638-33.html
Michael Horowitz

[nedra 234]

Do You Think!!!!