0day attack in Adobe Reader – again

Yet another 0day PDF attack is making the rounds. If you open an infected PDF file, and you’re using Adobe Acrobat Reader, your PC can get taken over.

Adobe confirms that 0day, but doesn’t offer much help. SANS Internet Storm Center is following the outbreak in real time.

The sky isn’t falling, but you shouldn’t open a PDF file attached to an inbound email message unless you’ve written to the sender and confirmed that they intended to send you a PDF. Even then you shouldn’t open it unless you trust the sender to be savvy enough to not be spreading around infected files.

No word yet on whether Foxit is similarly afflicted. (Many of you know that I don’t put Adobe Reader on my machines; I only use Foxit.)