New Severe Vulnerability Discovered in Adobe Acrobat

A new vulnerability is on the loose affecting Adobe Acrobat and the zero-day vulnerability is actively being exploited in the wild. Adobe Acrobat Reader 8 and 9 are believed to be affected by the vulnerability that could allow execution of a trojan or virus. The exploit is being described as the, "TROJ_PIDIEF.IN" trojan. Adobe has not yet released a fix for the exploit, which makes this vulnerability particularly severe.

In the meantime, you can disable javascript in your Adobe Acrobat Reader products to eliminate the vulnerability as it uses Javascript to perform the code execution. To disable javascript go into Adobe Reader and click on Edit -> Preferences -> JavaScript and then uncheck the Enable Acrobat Javascript. You should now be more safe from the vulnerability until Adobe releases a fix.

Differing variants of the vulnerability may be dropped onto an affected system. Below are some of the different variants to look out for according to Trend Micro:

* BKDR_NETCL.A
* EXPL_EXECOD.A
* JS_SHELLCOD.JS
* TROJ_AGENT.ZWQA
* TROJ_FAKEAV.LKQQ

Stay tuned for an update from Adobe Systems.