Cyber Risks · Cisco Talos

Homebrew patch for Adobe Acro Reader 9

Summary: A Cisco Talos researcher released a homebrew patch for an Adobe Reader 9 vulnerability, distributing a replacement AcroRd32.dll that users unzip into C:\Program Files\Adobe\Reader 9.0\Reader\ to overwrite the original file. The patch was built with only windbg and a hex editor, blocks current attacks using the described jbig2 method but may not stop others, and was later withdrawn after Adobe released its own update for Acrobat and Reader.

What you should know: Users were told to overwrite a core DLL in a widely deployed application with a file the author built at home, offered with no warranty and no guarantee against all attack variants - a stopgap that only held until Adobe's official fix arrived.

Read the original at Cisco Talos ↗

Topics
Malware
Related