25 March 2009, 10:05

Adobe fixes critical vulnerability in Unix versions of Acrobat and Reader

Adobe has released the Adobe Reader and Acrobat 8.1.4 and 9.1 updates for UNIX (Solaris) and Linux to fix a previously reported critical vulnerability. The vulnerability allowed malicious code to be injected and executed with the users permissions by using a specially crafted PDF file. According to the updated security bulletin, the updates also address an additional JBIG2 input validation issue that could possibly lead to remote code execution.

Adobe has already released updates for the Windows and Mac versions of Acrobat and Reader to address recent critical vulnerabilities. The 9.1 update for Windows and Mac was released during the second week of March. One week later, the 8.1.4 and 7.1.1 updates were also released.

All users who have not yet updated, are advised to do so. Version 9.1 of Adobe Reader is available to download.

See also: