Quote:
A vulnerability within Adobe Reader and Adobe Acrobat has been identified. Under certain circumstances, using XML scripts it is possible to discover the existence of local files.
Adobe has solutions available that can rectify these issues. Please refer to the Recommendations section for further information.
Effect: If exploited it may be possible to discover the existence of local files on an end-user system.
Details: The vulnerability is within the Adobe Reader control. If an XML script is embedded in JavaScript, it is possible to discover the existence of local files. An attacker could then use the information gathered for malicious purposes.
However the impact is minimized due to the fact that the existence of local files can only be discovered if the complete filenames and paths are known in advance by the attacker.
|
source: adobe.com
http://www.adobe.com/support/techdocs/331710.html
for the security updates go to:
http://www.adobe.com/support/downloads/
this is for adobe software Adobe Reader 7.0 and 7.0.1, Adobe Acrobat 7.0 and 7.0.1
please make sure you have version 7.0.1 of the pdf software if you dont then install the first update which will take the version to 7.1 then the second and also very important update to take it to version 7.0.2
Join CF
You are here: 
