Your membership has expired

The payment for your account couldn't be processed or you've canceled your account with us.

Re-activate

Save products you love, products you own and much more!

Save products icon

Other Membership Benefits:

Savings icon Exclusive Deals for Members Best time to buy icon Best Time to Buy Products Recall tracker icon Recall & Safety Alerts TV screen optimizer icon TV Screen Optimizer and more

    Adobe Reader software has a 'critical vulnerability,' says company

    Consumer Reports News: December 07, 2011 10:38 AM

    Adobe has issued a security alert for its Reader and Acrobat software: A critical vulnerability in the software is being used by hackers to install malware on computers running Windows, Apple OS, and Linux operating systems, according to the company.

    The flaw, called a memory corruption vulnerability, allows hackers to crash computers and then install malicious software. According to Adobe, the software security risk can be found in:

    • Adobe Reader X (10.1.1 and earlier 10.x versions) for Windows and Macintosh

    • Adobe Reader (9.4.6 and earlier 9.x versions) for Windows, Macintosh and UNIX

    • Adobe Acrobat X (10.1.1 and earlier 10.x versions) for Windows and Macintosh

    • Adobe Acrobat (9.4.6 and earlier 9.x versions) for Windows and Macintosh.

    Adobe's security alert acknowledges members of the Defense Security Information Exchange and the Lockheed Martin company for discovering the flaw, leading some to speculate that online criminals are attempting to use this Adobe software flaw to attack defense-industry computers.

    Adobe said that a fix for Version 9 of its Reader software is expected to be released next week, given the vulnerability in that Adobe software "is being actively exploited in the wild in limited, targeted attacks."

    Adobe also said its Reader X and Acrobat X software have protected modes that prevent malware from executing properly. But Adobe plans to fix the holes in those programs in the next quarterly security update, scheduled for January 10, 2012.

    For more information on protecting your computer from malware, check out Consumer Reports free Guide to online security as well as security software advice and Ratings.

    Security Advisory for Adobe Reader and Acrobat [Adobe]
    Critical Adobe Reader Zero-day Vulnerability Exploited in the Wild [PC World]
    Adobe Warns of Critical Zero-Day Vulnerability in Reader and Acrobat, Possibly Targeting Defense Firms [Security Week]

    Paul Eng

    Find Ratings

    Antivirus Software Ratings

    View and compare all Antivirus Software ratings.

    Computers Ratings

    View and compare all Computers ratings.

    E-mail Newsletters

    FREE e-mail Newsletters! Choose from cars, safety, health, and more!
    Already signed-up?
    Manage your newsletters here too.

    Electronics News

    Cars

    Cars Build & Buy Car Buying Service
    Save thousands off MSRP with upfront dealer pricing information and a transparent car buying experience.

    See your savings

    Mobile

    Mobile Get Ratings on the go and compare
    while you shop

    Learn more