Adobe Patches 0-Day Flaws in PDF Reader & Acrobat

Adobe has released an emergency patch to fix two critical vulnerabilities in Adobe Reader & Acrobat 9.5.3, X and XI that cybercriminals are actively exploiting in targeted attacks.

The vulnerabilities in question, CVE-2013-0640, CVE-2013-0641 are the same ones that FireEye researchers spotted early last week.

Users are advised to update Adobe Reader and Acrobat as soon as possible due to the ongoing attacks. The exploit discovered by FireEye is the first to bypass the built-in sandbox security feature in Reader and Acrobat.

How to Update Adobe Reader

To update Adobe Reader, users can:

• Use the program’s built-in update mechanism, which is set to run automatic update checks on a regular schedule by default.


• Check for updates manually by going to Help -> Check for Updates…


• Manually download and apply the update:
  
  
  
  • Windows
  
  
  • Mac OS X
  
  
  • Linux
  
  
  
  

How to Update Adobe Acrobat

To update Adobe Reader, users can:

• Use the program’s built-in update mechanism, which is set to run automatic update checks on a regular schedule by default.


• Check for updates manually by going to Help -> Check for Updates…


• Manually download and apply the update:
  
  
  
  • Windows (Acrobat Standard, Pro & Pro Extended Users)
  
  
  • Mac OS X (Acrobat Pro)
  
  
  
  

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+