Go Back   Windows Vista Forum | Vista Babble > Windows Vista > Vista Security

Reply
 
LinkBack Thread Tools Display Modes
  #1  
Old 10-13-2007, 06:42 PM
Snuffy's Avatar
Elite Members
 
Join Date: Nov 2006
Location: S.W. Kansas
Posts: 2,841
Snuffy is on a distinguished road
Send a message via MSN to Snuffy
Unhappy ADOBE lied about FLAW

Adobe PDF Flaw Only Affects XP, IE7, Company Confirms
Thursday, October 11, 2007,
A Reuters story that made the rounds this afternoon picked up on information first reported by BetaNews three weeks ago, regarding a vulnerability in PDF files rendered in Adobe Acrobat and Adobe Reader. But Reuters' reluctance to mention Windows until paragraph 10 on panel #2 may have been partly responsible today for some security sites reporting that the vulnerability affects Linux and Solaris users as well.<|>
Original Story
Adobe PDF Flaw Only Affects XP, IE7, Company Confirms
By Scott M. Fulton, III, BetaNews
October 10, 2007, 6:23 PM
A Reuters story that made the rounds this afternoon picked up on information first reported by BetaNews three weeks ago, regarding a vulnerability in PDF files rendered in Adobe Acrobat and Adobe Reader.

But Reuters' reluctance to mention Windows until paragraph 10 on panel #2 may have been partly responsible today for some security sites reporting that the vulnerability affects Linux and Solaris users as well.


While Reuters stated Adobe officials were not immediately available for comment, they did make themselves readily available to BetaNews. Spokesperson John Cristofano researched our inquiry and reported back to us that the vulnerability affects only Windows XP users with Internet Explorer 7 installed.

GNU Citizen.org researcher Petko D. Petkov is credited with having discovered the vulnerability, and with having disclosed its dynamics to Adobe prior to any public disclosure. His original headline for the discovery was "0day: PDF Owns Windows," making it clear the problem did not impact any Linux or UNIX distribution.

One clue to the fact that the problem is Windows-centric might have been ascertained by studying Adobe's posted solution, which involves a Windows System Registry hack.
__________________
The only Stupid Question is the one you failed to Ask!
Beta Tester since Pre Win 95.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Sponsored Links
  #2  
Old 10-14-2007, 11:59 PM
Snuffy's Avatar
Elite Members
 
Join Date: Nov 2006
Location: S.W. Kansas
Posts: 2,841
Snuffy is on a distinguished road
Send a message via MSN to Snuffy
Lightbulb ADOBE says it is Microsofts problem - Again

Confirmed: Adobe 'PDF Flaw' Actually XP Bug, Says MicrosoftA Microsoft security researcher confirmed to BetaNews that the vulnerability identified in the company's latest security bulletin is identical to the one originally attributed to Adobe PDF. It is a Windows XP/IE7 bug.

http://www.betanews.com/article/Conf...oft/1192118748

Read it all, but this goes back like 8 or 9 yrs. and it was a "Adobe error" then, and IMHO it still is ...
Quote:
Interestingly, Microsoft's security team is now suggesting that applications vendors (evidently including Adobe) should rely less upon Windows to do the filtering of URIs on their behalf.
They should write there programs better, ( I guess you know by now - I Snuffy have a - "I HATE ADOBE" and I REFUSE to use ADOBE on my systems...).
__________________
The only Stupid Question is the one you failed to Ask!
Beta Tester since Pre Win 95.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:48 PM.



Page generated in 0.12597 seconds with 10 queries

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23