Adobe brings forward zero-day patch releases

The firm plans to release security updates for Adobe Reader and Acrobat 9.3.4 for Windows, Macintosh and UNIX during the first week of October, according to an updated security advisory.

Adobe has provided a mitigation tool for Windows users of its products to help protect their systems until the patches are released.

The software firm said that, as the updates were ahead of the regular 90-day update on October 12, no further updates for Reader and Acrobat would be released on that date.

In July 2009, Adobe introduced a 90-day security update cycle for its Reader and Acrobat products, but has since been forced to release four out-of-band patches for zero-day flaws.

Adobe has also warned of a critical vulnerability in its Flash Player being actively exploited on Windows.

The vulnerability exists in Adobe Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, Solaris and Android.

This vulnerability also affects Adobe Reader 9.3.4 for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh.

The vulnerability could cause a crash and potentially allow an attacker to take control of the affected system, Adobe said.

This story was first published by Computer Weekly

What’s hot on Infosecurity Magazine?