Urgent Adobe Acrobat & Flash Security Advisory
Let's get right to the story here: there's an urgent update that Adobe has just made to Acrobat, Flash Player, and Adobe Reader.
If you have Acrobat, Reader, or Flash installed, which most folks do, you'll want to upgrade NOW. Here's the lead in of the Adobe security announcement.
"A critical vulnerability exists in the current versions of Flash Player (v9.0.159.0 and v10.0.22.87) for Windows, Macintosh and Linux operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat v9.x for Windows, Macintosh and UNIX operating systems.
"This vulnerability (CVE-2009-1862) could cause a crash and potentially allow an attacker to take control of the affected system.
"There are reports that this vulnerability is being actively exploited in the wild via limited, targeted attacks against Adobe Reader v9 on Windows."
[Editor's Note: Emphasis mine.]
Here are complete details (and the fix) to the Acrobat security issues
As of the writing of this post, it appears that antivirus software and a software firewall can help mitigate the impact.
