10 responses to “0day attack in Adobe Reader – again”

1. 

   Daisy December 16th, 2009 at 23:37

   Does this also effect full Standard and Professional versions of Adobe Acrobat? Or is it just a Reader issue?

2. 

   rc primak December 17th, 2009 at 00:45

   It’s a bit soon to see whether Foxit Reader follows suit with Adobe Reader to issue a security update, as they are usually a week or two behind. But as of today, no reports or updates regarding Foxit (I just checked). I will post again if this changes.

3. 

   woody December 17th, 2009 at 06:37

   Daisy -

   Yes, in the sense that if you use Standard or Professional to open a PDF file, you can get bit.

4. 

   EP December 20th, 2009 at 05:53

   @woody & @rc primak:

   It does not seem that the recent 0day security flaw affects Foxit Reader software.

   Here’s the site to report any security vulnerabilities in Foxit Software.

5. 

   woody December 20th, 2009 at 21:08

   Thanks, EP.

   Good news, indeed for those of us who use Foxit Reader instead of Adobe Reader.

6. 

   rc primak December 23rd, 2009 at 16:03

   Foxit Reader did in fact issue an update recently. Get it.

7. 

   EP December 25th, 2009 at 03:45

   Are you sure, rc primak? the latest Foxit Reader “update” was released back on November 26, 2009 – version 3.1.4 build 1125 as noted on the Foxit Reader downloads page. Don’t know what you’re talking about, silly rc primak. A recent update would or should have been released in December, NOT in November.

   At least those who use Sumatra PDF Viewer are NOT affected by the 0day PDF security flaw. One forum member confirmed it here.

   No probs, Woody. You may also want to try out Sumatra PDF Viewer, a light weight PDF file reader that starts up faster than Adobe Reader and Foxit Reader.

8. 

   EP December 29th, 2009 at 08:39

   UPDATE: Adobe is scheduled to release updates to Adobe Reader to fix the 0day PDF attack problem on January 12, 2010 as noted on Adobe’s blog.

9. 

   rc primak December 30th, 2009 at 12:30

   EP —

   In December 2009, I did get a notice in my Foxit Reader Updater that there was a new updated to the main program. I don’t know why you did not get the notice. I applied the update, but it was over some minor issue, not a big security issue, as I recall. My version is also 3.1.4.1125, but it came to me in mid-December. The official date stamp may vary.

10. 

    rc primak December 30th, 2009 at 12:34

    EP —

    Your version of Foxit Reader is the same as mine. But my last update came down in mid-December 2009. Maybe I did no updating of Foxit Reader for awhile, hence the difference. Could have been the November update, in which case, Foxit Reader has not reported any response to the sort of security problem currently facing Adobe Reader. We shall see.