Security Updates for Adobe Reader, Acrobat
Summary: Adobe released an update bringing its PDF Reader to version 9.3.1, fixing a pair of vulnerabilities it labeled critical, with updates available for Windows, Mac and Linux. The patches arrived alongside a ScanSafe report finding that roughly 80 percent of the Web-based exploits it detected in the fourth quarter of 2009 attacked Adobe Reader vulnerabilities, and that Reader plus Flash accounted for the lion's share of those exploits.
Key Takeaway: Roughly 80 percent of the Web-based exploits ScanSafe detected in Q409 targeted Adobe Reader, and researcher Aviv Raff showed the Adobe Download Manager shipped with Flash and Reader could be hijacked to reinstall a removed Reader and then exploit a known, still-unpatched flaw - so switching PDF readers alone did not close the hole.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026