Business IT - Technology for your business

No. 1 Story

Telstra adds one million mobile services, but Sensis plummets

Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.

read more

Critical vulnerability in widely used Adobe software

Business IT - Security

A critical vulnerability has been discovered in Adobe Reader, Acrobat and Flash Player. The vulnerability is being actively exploited against Reader 9 on Windows.

An advisory issued by Adobe warns of a critical vulnerability in the current versions of Flash Player for Windows, Mac OS X and Linux.

The authplay.dll component that is part of Adobe Reader and Acrobat version 9 for Windows, Mac OS X and Unix is also affected.

The issue is regarded as critical as successful exploits can take control of a system. Adobe notes reports of limited and targeted attacks against the Windows version of Reader 9.

Adobe suggests deleting, renaming or removing access to the authplay.dll file as a temporary defence for Acrobat and Reader. Under Windows, it is typically located at C:\Program Files\Adobe\Reader 9.0\Reader\authplay.dll or C:\Program Files\Adobe\Acrobat 9.0\Acrobat\authplay.dll.

Under Mac OS X, it can be located by right-clicking on the Adobe application and selecting Show Package Contents, and then opening the Frameworks folder within the Contents folder. There are apparently no reports of attacks on the Mac versions of the affected software.

Disabling authplay.dll will cause a crash or other error condition on opening a PDF file containing SWF content, Adobe warns.

The company also suggests the use of Vista's User Access Control to mitigate the impact of an exploit.

That still leaves the vulnerability in Flash Player. A bulletin released by US-CERT suggests disabling the Flash plugin or using NoScript (for Firefox or SeaMonkey) to allow Flash content only from trusted sites.

Anti-virus software may provide protection if kept up to date - Adobe has notified vendors of the issue.

Adobe plans to release updates for Flash Player 9 and 10 for Windows, Mac OS X and Linux by July 30, 2009. A release date for the Solaris versions has not been set.

Updates for Acrobat and Reader 9 are expected by July 31, 2009.

Loading comments ...

- sponsored feature -

The Death of Traditional BI: What’s Next?

How to Make Business Discovery Work for Your Business IP PABX BUYING GUIDE

Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more