|
Adobe Reader and Acrobat JavaScript Vulnerabilities |
|
US-CERT is aware of public reports of two vulnerabilities affecting Adobe Reader and Acrobat. The JavaScript methods customDictionaryOpen() and getAnnots() do not safely handle specially crafted arguments and can be manipulated to execute arbitrary code.
US-CERT encourages users and administrators to disable JavaScript in Adobe Reader to help mitigate the risk:
- Open the General Preferences dialog box
- From the Edit menu, select Preferences and then choose JavaScript
- Un-check Enable Acrobat JavaScript
Additional information regarding these vulnerabilities can be found in the Adobe PSIRT blog entry and in the Vulnerability Notes Database. US-CERT will provide additional information as it becomes available.
Read more: |
