Adobe Reader X: Seeking Safety in the Sandbox
Summary: Adobe released Reader X, a version of its PDF Reader built to run in a protected or "sandboxed" mode on Windows, blocking actions such as installing or deleting files or modifying system information. Adobe said it relied on experts from Microsoft and Google in developing the sandbox, which is designed to block attacks against previously unknown security holes; attackers had leveraged newly discovered Reader flaws to install malicious software on at least four occasions over the past year.
What's compelling: The update resets user preferences, including the options to disable JavaScript and lock down Trust Manager, so machines can return to a weaker configuration right after install. Commenters also note that Windows XP lacks the technologies sandboxing depends on, such as ASLR and integrity levels, leaving those users without the protection the release is built around.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026