News
Cisco Talos: vulnerability identified in Adobe Acrobat Reader DC
August 2017 by Cisco Talos
Cisco Talos disclosed a vulnerability that has been identified in Adobe
Acrobat Reader DC. The vulnerability, if exploited, could lead to arbitrary code
execution on affected devices.
As part of the coordinated effort to responsibly
disclose the vulnerability, Adobe has released a software
update<https://helpx.adobe.com/security/pr...>
that
addresses the vulnerability. Additionally, Talos has developed Snort rules that
detect attempts to exploit the flaw.
Parser vulnerabilities in common software packages such as Adobe Acrobat Reader pose
a significant security risk to large portions of the internet. The fact that these
software packages typically have a large footprints often gives attackers a broad
attack surface they can potentially leverage for malicious purposes. Thus,
identifying vulnerabilities and responsibly disclosing them is critical to
eliminating attack vectors that may otherwise be exploited.
