Adobe Working to Fix Security Bug in Download Manager

tgell · Feb 19, 2010

Adobe Systems is working to fix a glitch in software it uses to speed up downloads of its products that could give hackers a way to push malicious programs onto a victim's PC. According to security researcher Aviv Raff, Download Manager -- a small program Adobe users to speed up the initial installation of its products -- can be misused to force victims to install unwanted software on their computers.
Click to expand...

Article

MikeBCda · Feb 19, 2010

Interesting, especially that bit at the end about how DM uninstalls itself afterwards. There's been discussions elsewhere about DM being at best a PUP, and this article clarifies why I couldn't find it to remove it myself after the last Flash upgrade.

siljaline · Feb 19, 2010

Interesting article from the The Register

A researcher has unearthed a bug in software used to install Adobe's ubiquitous Reader and Flash applications that can be exploited to remotely install malicious files on end user PCs.

The Adobe Download Manager is an ActiveX script that is invoked when people install or update Reader or Flash using Internet Explorer. Researcher Aviv Raff has figured out how to exploit it to install any file he wishes simply by tricking a user into clicking on a link on the Adobe.com domain.
Click to expand...

More at Link

tgell · Feb 19, 2010

Good article.

From the article:

As we suggested recently, the myriad bugs that over the past few years have routinely imperiled the entire internet have made Adobe the Toyota of the software industry. Company security personnel seem intent of correcting the problems, but the only way for that to happen is to launch a comprehensive initiative that makes a top-to-bottom review of the company's entire code base.
Click to expand...

How True!

siljaline · Feb 19, 2010

Glad you liked the article. Also from: The Register

Adobe predicted as top 2010 hacker target Adobe will overtake Microsoft as the primary target for hackers and virus writers in 2010, net-security firm McAfee predicts.

Attacks targeting vulnerabilities in Acrobat Reader and Flash are already commonplace, driven in part by that software's widespread use. The often-tricky update process and lack of user awareness that apps as well as browsers and Windows need updating further compounds the problem of PDF-based malware - which McAfee reckons will only increase next year.

The security firm also predicts an increase in the severity and power of hacking attacks aimed at users of social networking websites such as Twitter and Facebook. Mystic McAfee also predicts that banking Trojans will become even more sophisticated, perhaps by gaining the ability to interrupt legitimate transactions and make unauthorised withdrawals without being detected. Malware in email attachments, a common ploy in targeted attacks, is also expected to increase.

Meanwhile, botnets - the main currency of cyberattacks - are likely to move further away from reliance on command and control servers towards a peer-to-peer architecture that's more resilient against takedown efforts.
Click to expand...

More at: Link

Log in or Sign up

Adobe Working to Fix Security Bug in Download Manager

tgell Registered Member

MikeBCda Registered Member

siljaline Registered Member

tgell Registered Member

siljaline Registered Member

Log in or Sign up

Adobe Working to Fix Security Bug in Download Manager

tgell Registered Member

MikeBCda Registered Member

siljaline Registered Member

tgell Registered Member

siljaline Registered Member

Useful Searches