Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Report: PDF files used to attack computers
ZDNet ^ | Oct 27, 2007 | n/a

Posted on 10/27/2007 5:40:16 PM PDT by holymoly

E-mails containing malicious PDF files have been putting computers at risk since Friday, Finnish security software firm F-Secure said on Saturday.

"The e-mails sent in bulk looked like credit card statements, and contained an attachment called 'report.pdf'," its Chief Research Officer Mikko Hypponen said in a statement.

When such PDF files are viewed on vulnerable machines, they start downloading software from servers in Malaysia or Sweden, which are now being cleaned, he said. "There will be more such attacks."

"We are worried about this case, as PDF attachments are typically not filtered at e-mail gateways."

A security update for Adobe Acrobat Reader, which opens PDF files, was made available a few days ago, but many users have not updated the program yet, Hypponen said.


TOPICS: News/Current Events; Technical
KEYWORDS: adobe; email; exploit; pdf
Navigation: use the links below to view more comments.
first 1-2021-25 next last
Anyone interested in an alternative to Adobe Acrobat Reader may want to visit Foxitsoftware.com  ("Foxit Reader" is free.)
1 posted on 10/27/2007 5:40:19 PM PDT by holymoly
[ Post Reply | Private Reply | View Replies]

To: holymoly

I’ve been using Foxit since 2002 or 2003 and love it.

Good post. Hope this turns more folks onto Foxit.


2 posted on 10/27/2007 5:44:02 PM PDT by jdm
[ Post Reply | Private Reply | To 1 | View Replies]

To: holymoly

Foxit Reader is great.


3 posted on 10/27/2007 5:52:07 PM PDT by Spirochete
[ Post Reply | Private Reply | To 1 | View Replies]

To: holymoly
E-mails containing malicious PDF files have been putting computers at risk since Friday

Slow on the uptake?

My filter service has been quarantining these things for months.

"Blah, blah, blah, and don't open attachments blather yakkity yak, blah...".

4 posted on 10/27/2007 5:56:55 PM PDT by ApplegateRanch (...and there is no new thing under the sun.. Ecclesiastes 1:9 [KJV])
[ Post Reply | Private Reply | To 1 | View Replies]

To: holymoly
A security update for Adobe Acrobat Reader, which opens PDF files, was made available a few days ago, but many users have not updated the program yet.

I know people who haven't updated their version of Adobe since before Y2K!

5 posted on 10/27/2007 5:57:36 PM PDT by jdm
[ Post Reply | Private Reply | To 1 | View Replies]

To: holymoly

I did an Adobe update a few days ago. Maybe this was the reason.

I have read elsewhere, however, that the underlying problem is in Windows, not Adobe Reader. Adobe can do a fix for any particular attack, but Microsoft now admits that the basic vulnerability requires a change in one of their system files, I forget the exact details.


6 posted on 10/27/2007 6:07:34 PM PDT by Cicero (Marcus Tullius)
[ Post Reply | Private Reply | To 1 | View Replies]

To: jdm
I’ve been using Foxit since 2002 or 2003 and love it.

Good post. Hope this turns more folks onto Foxit.

Free. Fast. Small (download & install). Doesn't scatter files all over your HD (at least, version 2.0 didn't).

IMO You can't go wrong with Foxit Reader.

7 posted on 10/27/2007 6:10:13 PM PDT by holymoly
[ Post Reply | Private Reply | To 2 | View Replies]

To: holymoly

Can I get rid of Adobe if I get Foxit Reader? I’m kinda ignernt of all things PDF. Thanks in advance.


8 posted on 10/27/2007 6:19:56 PM PDT by davetex (There are no stupid questions, however there does seem to be an abundance of inquisitive idiots.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Cicero
I have read elsewhere, however, that the underlying problem is in Windows, not Adobe Reader. Adobe can do a fix for any particular attack, but Microsoft now admits that the basic vulnerability requires a change in one of their system files, I forget the exact details.

Could this be it?

With Exploits Out, Microsoft's Urgency Grows

I only scanned it briefly, but apparently, IE7 is at the core of the problem.

9 posted on 10/27/2007 6:26:42 PM PDT by holymoly
[ Post Reply | Private Reply | To 6 | View Replies]

To: davetex
Can I get rid of Adobe if I get Foxit Reader? I’m kinda ignernt of all things PDF.

Well, I don't have Adobe Acrobat Reader on any of my systems. I haven't for years. I've encountered no problems viewing any PDF file, using Foxit Reader.

As I recall, Foxit Reader does not include a browser plugin.

My advice would be to simply give it a "test run" for a few weeks. If you're happy with it, un-install Adobe.

BTW The Foxitsoftware site has a Foxit Reader User Manual you can download.

10 posted on 10/27/2007 6:36:46 PM PDT by holymoly
[ Post Reply | Private Reply | To 8 | View Replies]

To: holymoly

Yes. I saw it at BetaNews, from which it seems to have disappeared for some reason, but that’s pretty much what I read.

I have put IE7 on my computers, and enjoy the tabbed browsing ability, but it does seem to be considerably more bloated than IE6. I wonder if I should have stuck with that?


11 posted on 10/27/2007 7:06:06 PM PDT by Cicero (Marcus Tullius)
[ Post Reply | Private Reply | To 9 | View Replies]

To: holymoly

bookmark


12 posted on 10/27/2007 7:07:04 PM PDT by DocRock (All they that TAKE the sword shall perish with the sword. Matthew 26:52 Gun grabbers beware.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: holymoly

An Adobe update screen tends to startup when I log on to secure websites using XP, anyone know why?


13 posted on 10/27/2007 7:07:26 PM PDT by Freedom4US
[ Post Reply | Private Reply | To 1 | View Replies]

To: Cicero
I have put IE7 on my computers, and enjoy the tabbed browsing ability, but it does seem to be considerably more bloated than IE6. I wonder if I should have stuck with that?

Firefox is better. I keep IE around, but I only use it on the rare site that doesn't work in Firefox.

14 posted on 10/27/2007 7:12:44 PM PDT by cynwoody
[ Post Reply | Private Reply | To 11 | View Replies]

To: holymoly

My understanding is that Foxit is also vulnerable to this exploit. The vulnerability is in Microsoft’s handling of the mailto: protocol. If you open a hacked document and click a mailto: link on an unpatched system, you are hosed. If Foxit has an advantage, it may be that it makes it a little harder to do that accidentally.


15 posted on 10/27/2007 7:21:34 PM PDT by cynwoody
[ Post Reply | Private Reply | To 1 | View Replies]

To: Cicero
I have put IE7 on my computers, and enjoy the tabbed browsing ability, but it does seem to be considerably more bloated than IE6. I wonder if I should have stuck with that?

Well, Firefox, Seamonkey (formerly the Mozilla Suite) and Opera all support tabbed browsing.

Firefox is my browser of choice, primarily because of the add-ons.

Opera (9.24), seems easier on resources.

And, of course, they're all free.

16 posted on 10/27/2007 9:03:07 PM PDT by holymoly
[ Post Reply | Private Reply | To 11 | View Replies]

To: Cicero; ShadowAce

The problem is the combination of Windows XP (or Windows Server 2003) and IE7. If you don’t have one or the other of them, you’re o.k. See this link:

http://www.freerepublic.com/focus/f-news/1916936/posts?page=17#17


17 posted on 10/27/2007 10:15:39 PM PDT by CedarDave (The only access Hillary-care will bring is access to a waiting list.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: holymoly
When such PDF files are viewed on vulnerable machines

That's all I needed to read. Why didn't the headline say "PDF files used to attack computers--OF STUPID PEOPLE"?

Any idiot who opens an attachment they don't recognize--after a decade of such warnings--deserves what they get.

18 posted on 10/27/2007 10:27:18 PM PDT by montag813
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdb3; chance33_98; Calvinist_Dark_Lord; PenguinWry; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; ..

19 posted on 10/28/2007 6:38:51 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Freedom4US
Adobe Update is the memory resident updater for Acrobat. It loads when you start Windows.

They introduced it with version 6, if I recall correctly, and once you've started Acrobat once, it holds a blank 24 meg copy of Acrobat in memory with it. This is to help speed up Acrobat.

I use Foxit now. Acrobat has become fat and annoying.

20 posted on 10/28/2007 6:46:28 AM PDT by Psycho_Bunny (Islam is a clown car with guns.)
[ Post Reply | Private Reply | To 13 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-25 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson