Adobe Flash Player & PDF Reader bugs

[vasa1]

Adobe’s Flash Player was updated yesterday fixing several security vulnerabilities in the process. The patch was initially slated for a November 9 release but released in advance yesterday. But Adobe Flash was not the only vulnerable Adobe product. Adobe has scheduled an update for their popular pdf readers Adobe Reader and Adobe Acrobat on November 15 to fix an actively exploited vulnerability.

http://www.ghacks.net/2010/11/05/ado...lnerabilities/

Apparently, a possible fix involves modifying the registry

On Windows, the JavaScript Blacklist can be in two locations. Please review the following options and then create the registry key of your choice:

Enterprise list: This blacklist helps enterprises roll out policies that block exploitable API(s) from executing in their environment. Populating the blacklist in this location is the responsibility of the enterprise. Adobe patches never modify this registry location.

[Daveski17]

I usually update Adobe Flash in Firefox (Chrome does it automatically) & I'm not too keen on the advice given that you may have to temporarily disable your AV. I tried this on my laptop & it didn't make any difference to the ridiculously long time it took to download.

I'm just glad I don't use their PDF reader any more.