Adobe patches old PDF software to combat new exploits

Stephen Withers
Friday, 20 March 2009 03:19

Opinion and Analysis

Stuck on Acrobat or Reader version 7 or 8? It's time for a patch even if you can't or won't update to version 9.

Last week, Adobe updated Acrobat and Reader to fix a critical flaw that allowed a maliciously crafted PDF file to take control of the system.

At the time, company officials said updates for older versions would be delivered - and now they are here.

Acrobat and Reader versions 7.1.1 and 8.1.4 address the same security issues as the 9.1 releases.

The main reasons for not updating to version 9.x are a standard operating environment that does not yet include that version, old hardware that's not fast enough to give a reasonable experience with the newer software, and the continued use of old operating systems or browsers.

For example, if you're still on Mac OS X 10.2 or 10.3 (and that's probably because you're on old hardware that doesn't support newer versions), you can't go beyond Acrobat or Reader 7.x.

Or if you're a Windows user hanging on to Internet Explorer 5.x (it may be hard to believe, but it is still out there), Acrobat or Reader 8.x is the end of the line for you.

But perhaps the most valid reason for not updating Acrobat is the cost. Reader is a free program, but Acrobat costs money - an upgrade to version 9 Standard costs $A185. If version 7 or 8 still does everything you need, why waste money?

That's not to say Acrobat 9 isn't good value if you can use the new(er) features and capabilities.

Anyway, Adobe deserves praise for continuing to deliver security patches for two superseded versions. Some vendors only support the current and previous major version in this way, and others freeze products as soon as the next generation is released.

You can download the various versions via this page on Adobe's web site.