Thursday 11 January 2007

PDF attacks not as likely as first feared

Initial fears of a major security flaw affecting every website containing a PDF are not as bas as first feared.  Last Thursday IWR revealed that security experts at iDefense, part of VeriSign had warned the information industry of the flaw.


Now Ken Dunham, director of the Rapid Response Team at iDefence has revealed that they over-egged the risk and now realise it only affects old browser versions and a hacker is therefore unlikely looking to exploit the flaw.  Dunham now describes the risk as "somewhat limited"; he said to IWR sister title The Inquirer.


Dunham does recommend that information professionals avoid future problems by downloading version 8 of Adobe Acrobat.

No comments:

Post a Comment