blogme24.com

MacUsersGuide offers the latest news, reviews, how-tos and expert opinions on everything Mac users need to know. Find news and Macintosh Support at http://www.macusersguide.com.

(ArticlesBase SC #932401)

Article Source: http://www.articlesbase.com/ – Annotations Have the Last Word: Adobe Reader PDF Makes Mac OS Vulnerable

You could be getting more than you bargained for when you download a PDF or receive one as an email attachment. PDFs can run scripts upon opening them and could potentially compromise your system.

Adobe Systems Inc. confirmed the existence of two new vulnerabilities in their Adobe Acrobat Reader application. The news was announced May 4 by Trustwave and other security agencies which stated that Adobe expects to release patches by May 12, 2009. The vulnerabilities involve JavaScript functions that ‘getAnnots ()’ (CVE-2009-1492) and spell.customDictionaryOpen (CVE-2009-1493). According to Secunia.com the ‘getAnnots ()’ function is a JavaScript API in Acrobat Reader and Acrobat that allows remote assault to cause a denial of service through memory corruption or execute an arbitrary code via a PDF that contains that annotation. This is conducted through an OpenAction entry using JavaScript code that issues a series of crafted integer arguments or calls.

The customDictionaryOpen spell method is also a JavaScript API that affects Adobe Reader 8.x – 9.1 running primarily on Linux System. It allows remote hackers to deny services through a memory corruption and, similar to the ‘getAnnots’, may be executed through an arbitrary code via a PDF. Mac users don’t have to be too concerned about the customDictionaryOpen function as this is mainly something that will come up using Linux. The most troubling out of the two is the ‘getAnnots ()’.

These vulnerabilities cause a Macintosh-based Acrobat Reader versions 9.x – 8.x and Acrobat 9.x – 8.x to crash and have the potential to allow a hacker to attack and take control of a vulnerable system. Simply disabling JavaScript will not resolve anything; it only disables the vulnerable JavaScript component but does not reduce system compromise. The United States Computer Emergency Readiness Team (US-CERT) has recommended the following precautions for those that have or yet to encounter these PDFs.

Do not open unsolicited PDF files from distrusted or suspicious sources; switch your default PDF handler to Preview for the time being; and disable Adobe Reader JavaScript Preferences to prevent hackers from exploiting system vulnerabilities. To do this:

(1) Launch Adobe Acrobat Reader
(2) Select Edit from the Menu Bar
(3) Select Preferences
(4) Select the Internet Tab
(5) Uncheck the “Display PDF in Browser”

In addition, prevent your default browser (Internet Explorer, Firefox, Safari, etc.) from automatically opening PDF documents. The installer that loads Adobe Reader and Acrobat configures any one of your browsers to open a PDF file without any user interaction. To disable the browser from displaying of PDF documents:

(1) Launch Adobe Acrobat Reader
(2) From the main Menu select Edit
(3) Select Preferences, Click on the Internet tab
(4) Uncheck “Display PDF in browser” checkbox.

Avoiding opening PDF documents in a web browser reduces the possibility of attack. The following workaround applied to the updated version of Adobe Reader should protect against future vulnerabilities.

If you have a PC, additional preventative measures are listed at the US-CERT site that further reduce your chances of attack. Currently Adobe recognizes this as a critical issue and recommends that you follow the above listed steps and exercise common sense when opening PDF files. Please visit the Adobe Product Security Incident Response Team blog for further updates on this issue.

Retrieved from “http://www.articlesbase.com/computers-articles/annotations-have-the-last-word-adobe-reader-pdf-makes-mac-os-vulnerable-932401.html”

(ArticlesBase SC #932401)

Carl Berkeley –
About the Author:

MacUsersGuide offers the latest news, reviews, how-tos and expert opinions on everything Mac users need to know. Find news and Macintosh Support at http://www.macusersguide.com.

]]>

Rate this Article

1
2
3
4
5

vote(s)
0 vote(s)

Feedback
RSS
Print
Email
Re-Publish

Source: http://www.articlesbase.com/computers-articles/annotations-have-the-last-word-adobe-reader-pdf-makes-mac-os-vulnerable-932401.html

Article Tags:
annotations have the last word adobe reader pdf makes mac os vulnerable

Last Minute Flight

author: admin category: hot trends

Last Minute Flight

This release finds the smooth jazz saxophone superstar paired with vocal giants ranging from Barbra Streisand, Gladys Knight, and Chaka Khan to pop stars including LeAnn Rimes, Daryl Hall, Richard Marx, Brian McKnight, and Earth, Wind and Fire just to name a few.

He also enlisted some instrumental industry heavyweights to pitch in as well. Including trumpeter Arturo Sandoval, saxophonist David Sanborn, pianist David Benoit, and the legendary composer Burt Bacharach.

The CD formula largely works, coming off as a breezy, laid back concert with G adding soft asides to his guest’s vocal performances.

Cheapest Flights Guide Click here

On track 7 Brian McKnight delivers a very nice rendition of Careless Whispers, and on what could be the highlight of the collection, track 5, Chaka Khan actually betters Christina Aguilera’s already outstanding Beautiful. Making it her very own as only she can.

Another very good song is track 6, Pick Up The Pieces on which G teams up with fellow sax smooth jazz Hall of Famer David Sanborn. The pairing of the two saxophone legends leads to a very intriguing sound combination.

I give At Last… The Duets Album my highest recommendation. It just plain belongs in any serious music collectors collection regardless of genre preference.

One of the refreshingly nice things about this CD is the way all of the participating artists seem to be really enjoying themselves. Combine that with the overall presentation and you’ve got one of Kenny G’s most impressive releases ever.

While this entire CD is outstanding the truly standout tunes and SmoothJazz247.com favorites are Don’t Know Why [track 2], Pick Up The Pieces [track 6], and Baby Come To Me [track 9]. My SmoothLee Bonus Pick, and the one that got Sore […as in “Stuck On REpeat”] is track 7, Careless Whisper. Very nice!

Release Notes:

Kenny G originally released At Last… The Duets Album on November 23, 2004 on the Arista record label.

CD track list follows:

1. (Everything I Do) I Do It For You- featuring LeAnn Rimes

2. Don’t Know Why- featuring David Benoit

3. I Believe I Can Fly- featuring Yolanda Adams

4. At Last- featuring Arturo Sandoval

5. Beautiful- featuring Chaka Khan

6. Pick Up The Pieces- featuring David Sanborn

7. Careless Whisper- featuring Brian McKnight

8. Misty- featuring Gladys Knight

9. Baby Come To Me- featuring Daryl Hall

10. The Way You Move- featuring Earth Wind & Fire

11. Sorry Seems To Be The Hardest Word- featuring Richard Marx

12. Alfie- featuring Burt Bacharach

13. XThe Music That Makes Me Dance- featuring Barbra Streisand

Cheapest Flights Secrets Click here

The Cheapest

Flights All Over The World Click here

blogme24.com

Blog de blogme24.com

Annotations Have the Last Word: Adobe Reader PDF Makes Mac OS Vulnerable

Last Minute Flight

Pages

Archives

Categories

Blogroll

Meta