23.02.2009

Severe vulnerabilities in Internet Explorer 7, Adobe Reader and Adobe Acrobat

Recently, Microsoft released a patch for a critical vulnerability in the Internet Explorer 7, which allows the execution of arbitrary commands. CERT-FI recommends that computers are upgraded by the Microsoft's MS09-002 as soon as possible.

Adobe has warned of the critical vulnerability in their Adobe Reader and Adobe Acrobat software. According to Adobe, the attempt is to patch the vulnerability in the most recent versions by Wednesday, 11 March. There will be a patch for older versions after this. Before the patched software version is available, the problem can be limited by turning off JavaScript support in Adobe Reader and Adobe Acrobat.

More information on vulnerabilities at www.cert.fi