AN AUSTRALIAN security consulting firm has told users Acrobat Reader version 5.1 has a highly critical vulnerability that could lead to the leaking of data.
NGSSoftware found a data format buffer overflow in which could potentially be exploited to compromise a user's system.
Apparently the vulnerability is caused due to a boundary error within the debugging functionality when parsing documents in the XML forms data format (".xfdf").
A hacker using the flaw could trick a users into looking at a doctored XFDF document which could trigger a buffer overflow.
NGSSoftware contacted Adobe about the flaw and been told that the latest version of the reader, 6.0, did not suffer from it. It has recommended to all its clients that they upgrade immediately.
Source:
INQ
|