Tech: Disable Javascript in Adobe apps NOW

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: pattyClink
Date: 16 Dec 09 - 08:22 PM

Foxit is a great alternative to Adobe.

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Jim Dixon
Date: 16 Dec 09 - 02:01 PM

From Adobe's security bulletin:

"Customers using Adobe Reader or Acrobat versions 9.2 or 8.1.7 can utilize the JavaScript Blacklist Framework to prevent this vulnerability. Please refer to the TechNote for more information."

In other words, they have a program you can download and run which temporarily fixes the problem by disabling certain functions of Adobe Acrobat or Reader.

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Amergin
Date: 16 Dec 09 - 01:21 PM

Don't open emails from sources you don't know....

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Bill D
Date: 16 Dec 09 - 01:17 PM

as the 2nd link says... "use an alternate PDF viewer" until this is sorted out.

Sumatra or PDF Exchange...or even Foxit.

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: GUEST,Mr Red
Date: 16 Dec 09 - 10:47 AM

Which versions are affected?

I use Reader 6 somtimes because that was the last one you could download as an installer and install off-line.

I use Writer/Distiller 5 and reader 5 for writing pdfs.

& I don't download big pdf's at home - I use the library PCs because they are better protected (except last month).

But the rule should always be if you don't know who it is from and you didn't expect it, it is of little use. And the unsuspecting friends who disseminate - usually have made themselves obvious in previous e-mails. eg like bulk e-mails revealing everyone's address.

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Stilly River Sage
Date: 16 Dec 09 - 10:16 AM

Now why would adding "A" to your contact list work, when the problem is that people are opening attachments with this payload? I don't find anything in the articles Bonnie posted that suggest an alphabetical barrier is the answer.

I use PDFs, Acrobat, and Adobe Reader very heavily in my work, and if I disabled Javascript I'd be hobbling myself. I'll just continue to only open email from trusted senders and when it looks like a normal post.

SRS

Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Girl Friday
Date: 16 Dec 09 - 08:08 AM

You can protect your email list from infiltration by adding "A" to your contact list.

Subject: Tech: Disable Javascript in your Adobe apps NOW
From: Bonnie Shaljean
Date: 16 Dec 09 - 07:00 AM

http://news.cnet.com/8301-1009_3-10415794-83.html

http://blogs.zdnet.com/security/?p=5119&tag=nl.e589

http://www.pcworld.com/businesscenter/article/184704/adobe_reader_zeroday_exploi


Plenty more out there if you google around