Adobe Reader / Acrobat Two Vulnerabilities
SECUNIA ADVISORY ID:
Privilege escalation, System access
Apple Macintosh OS X
Adobe Acrobat 7.x
Adobe Reader 7.x
Two vulnerabilities have been reported in Adobe Reader and Adobe
Acrobat for Mac OS, which may grant elevated permissions on certain
folders or can be exploited by malicious people to execute arbitrary
local programs on a user's system.
1) An unspecified error can be exploited to execute arbitrary
programs already installed on a user's system via a specially crafted
2) A security issue in the updater causes Safari Frameworks folder
permissions to be elevated for all users when downloading updates.
The vulnerabilities affect versions 7.0 and 7.0.1 for Mac OS.
Update to version 7.0.2.
PROVIDED AND/OR DISCOVERED BY:
1) The vendor credits Aandi Inston.
2) The vendor credits John C. Welch.
Best Black Friday Deals
CNET editors are busy culling the list and highlighting what we think are the best deals out there this holiday season.