Acrobat flaw could spawn Web attacks
,----[ Quote ]
| A security weakness in the ubiquitous Acrobat Reader software could be
| a boon for cybercrooks, security experts warned Wednesday.
|
| An error in the Web browser plug-in of Adobe Systems' tool lets
| cybercrooks co-opt the address of any Web site that hosts an Adobe
| PDF file for use in attacks, Symantec and VeriSign iDefense said.
| An attacker could construct seemingly trusted links and add
| malicious JavaScript code that will run once the link is clicked,
| they said.
`----
http://news.zdnet.com/2100-1009_22-6147038.html
It's the browser extension, which I suspect is only available for Win32. As
many of us know, the user will, for reasons of pragmaticism, be
Administrator, so the damage can be high-level.
|
|