If you haven’t already done so, this would be a really good idea. A “0-Day” was released a few days back for Adobe Reader, which allows one to write a malicious .pdf file to put a payload of malware on your computer. Adobe have been dragging their feet in fixing this, and of course the assholes out there have to put it to work when given an opportunity.
Basically, you open a malicious .pdf, and you have malware on your PC. A site my wife went to had one in a popup, and she’s probably spending the next hour or two cleaning up the mess. The solution is pretty simple:
- Open Adobe Reader in standalone mode (from the Start Menu).
- Under the Edit menu, click Preferences.
- Find the Javascript tab or category.
- Uncheck “Enable Javascript in Adobe” or “Enable Acrobat Javascript“.
- Click OK.
Adobe Reader 9 is supposed to be updated the 11th, and versions 7 and 8 are getting theirs the 18th.
Tags: oops