Most malware in 2009 used Acrobat/PDF for exploits(blogs.zdnet.com)
blogs.zdnet.com
Most malware in 2009 used Acrobat/PDF for exploits
http://blogs.zdnet.com/security/?p=5473
4 comments
Probably a combination of both (plus a little bit of user education on the MS side of the equation.) Recent MS operating systems and browsers are more secure then older versions that are slowly being phased out, most users are using firewalls/anti-virus enhancements, and users are more aware of the fact that certain attachments/files are not safe to just blindly open. On the Adobe side it seems like a decade of stuffing in useless bells and whistles to Acrobat to justify the size/budget of that group within Adobe is finally making the code too complex to properly vet and things that seemed like a good idea in the "what features should we add to the next rev" meetings are now looking like bad choices. The problem Adobe faces is that it is hard for a big company to remove features and they no longer have enough dominance over the spec or marketshare to create a "new and improved" version that enables them to paper over or rip out their mistakes.
Many such exploits are in-browser, and require no action on the part of the user apart from visiting a highjacked/fake web-site.
Why do I have to choose? And more importantly, why do malware guys have to choose?
I think the author misses the point at the end - it's not a choice between Adobe messing up and users not updating. The question is "why are so many users running outdated versions?" I believe one of biggest reasons is because Adobe makes it such a pain in the neck to update their products.
Flash and Acrobat: more reasons to just go to open source.
Then again, there are some perfectly cromulent proprietary PDF readers: Preview.app and Foxit.
Make sure you turn off javascript within acrobat.
Does not help. There are other exploits out there, and there are always ways to programatically turn it on, which some malware will surely do for your convenience.
Better update, or seek an alternative PDF reader.
Better update, or seek an alternative PDF reader.
How do you tell which?