Adobe Warns of Security Flaw in Reader

isusmiley writes "Adobe Systems Inc. issued a warning on its Web site Tuesday saying that the flaw affects only the Adobe Reader versions 5.0.9, 5.0.10, which were written for the Unix computer operating system. Adobe has since posted a fix for the vulnerability on its site, and a spokesman said Wednesday he was unaware of any security breaches resulting from the software flaw, which was discovered by the security defense firm IDefense, headquartered in Reston, Va."

Oh good

[Dammital]

Adobe's recommendation is to replace their vulnerable version 5 reader with the spyware version [lwn.net] 7.

That's progress. Of a sort.

Re:Oh good

[MoonFog]

And even with the spyware, the Linux version is still incapable of opening DRM'ed ebooks, seeing how it appears to be locked in with MS passport.

I'll see your flaw, and raise you DRM

[hacker]

"Adobe has since posted a fix for the vulnerability on its site, and a spokesman said Wednesday he was unaware of any security breaches resulting from the software flaw..."

Two words: Show me .

Prove that the "flaw" exists. Just saying "Clicking on the whatchamacallit causes bad things to happen, please upgrade." isn't enough.

Show me that this isn't some FUD to force users to upgrade to a version that isn't riddled with the latest DRM that they "forgot" to put into those versions?

Show me that this version doesn't fix a vulnerability that exposes passwords in PDFs read with it.

Show me that this isn't more ass-covering by Adobe, again.

Until then, xpdf, gpdf and other non-Adobe variants are all working fine. Nothing to see here, move along.