Adobe Working to Fix Security Bug in Download Manager

Friday Feb 19th 2010 by Staff

A feature that allows Adobe to download programs to PCs faster could also allow criminals to push malware onto systems.

PCWorld: Adobe says it is working on a patch for a software glitch that was discovered by security researcher Aviv Raff. A flaw in Adobe's download manager means an "attacker can force an automatic download and installation of any executable he desires," Raff wrote in a blog post. "So, if you go to Adobe's Web site to install a security update for Flash, you really expose yourself to a zero-day attack."

Although Adobe is taking the threat seriously, a spokesperson pointed out that it would be difficult for users to install malware without knowing it, because "the user has to accept a number of prompts before being taken through the installation process."

Mobile Site | Full Site
Copyright 2017 © QuinStreet Inc. All Rights Reserved