Adobe, Microsoft Push Security Upgrades
Summary: Adobe and Microsoft each released critical security updates on April 13, 2010: Microsoft's 11 updates fix at least 25 vulnerabilities across Windows, Office, and Exchange, while Adobe's Reader and Acrobat update fixes at least 15 flaws. Adobe also shipped a new auto-updater with Reader and Acrobat version 9.3.2 on Windows and Mac that includes an option to install updates automatically.
Key Takeaway: One Microsoft patch addresses a flaw that lets an attacker make Windows report a malicious program as coming from any vendor the attacker chooses to impersonate, and another critical flaw on Windows 2000, XP, Server 2003 and Server 2008 can be triggered just by visiting a web page hosting a specially crafted .avi file.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026