Adobe launches mitigation tool for latest zero-day vulnerability

Adobe has announced a mitigation tool for the latest zero-day...

Adobe has announced a mitigation tool for the latest zero-day vulnerability in its Reader and Acrobat products that could allow attackers to take control of victims' computers.

The software firm issued security advisory last week warning that the vulnerability was being actively exploited in the wild.

The vulnerability exists in Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh and Unix, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh.

Adobe said current exploits are targeting the Windows platform, but attacks could be mitigated using Microsoft's Enhanced Mitigation Evaluation Toolkit (EMET).

"Due to the time-sensitive nature of this issue, testing of the functional compatibility of this mitigation has been limited. Therefore, we recommend that you also test the mitigation in your environment to minimise any impact on your workflows," Adobe said in a security advisory update.

The mitigation tool will help protect users until a patch is available, which may be released before the next scheduled security update on 12 October.

In July 2009, Adobe introduced a 90-day security update cycle for its Reader and Acrobat products, but has since been forced to release four out-of-band patches for zero-day flaws.



Enjoy the benefits of CW+ membership, learn more and join.

Read more on Hackers and cybercrime prevention



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: