Adobe flags critical vulnerability in Acrobat 7 and Reader

Stan Beer
Thursday, 07 December 2006 19:21

Your IT - Home IT

Adobe has issued an advisory concerning critical vulnerabilities that have been identified in Adobe Reader and Acrobat 7.0 through 7.0.8 that could allow an attacker to take control of the affected system running IE 7 but, fortunately for Firefox users, not other browsers.

However, for an attacker to gain control of a computer the enduser must visit a maicious website while running an affected Adobe version.

Adobe recommends that users update to Adobe Reader 8 or apply the workaround provided below if they can't upgrade:


1. Exit Internet Explorer, Adobe Reader, and Adobe Acrobat, if necessary.
2. Browse to <volume>:\Program Files\Adobe\Acrobat 7.0\ActiveX.
      Note: If you did not install Acrobat to the default location, browse to the location of your Acrobat 7.0 folder.
3. Select AcroPDF.dll and delete it.
4. Download the AcroPDF.dll file provided here.
5. Copy the new AcroPDF.dll file in to the ActiveX directory.