Adobe has patched the same vulnerability in its Acrobat and Reader PDF applications for the second time. The APSB19-13 , released today, appears to completely eliminate the CVE-2019-7089, which the company attempted to address with an update earlier this month.
Apparently it didn't succeed, but today's version, as the company claims, came to close the security gap.
In other words, the older Adobe update does not fully fix the problem, so all users will need to update their Acrobat and Reader installations again.
According to Symantec's Security Focus, the vulnerability is the result of a boundary condition error in Reader and Acrobat and can be exploited remotely by attackers.
To exploit the vulnerability , a victim would need to open a malicious file in Acrobat or Reader, which could come via email or be downloaded from a web page. Opening the file could expose the computer's information to the wrong hands.
What's the problem with the two patches?
This is a data disclosure flaw, which makes it less serious than vulnerabilities that facilitate remote code execution, but Adobe had to patch it anyway.
Adobe's patch came as part of a larger patch package released on Patch Tuesday in collaboration with Microsoft. The package patched 150 CVE vulnerabilities in Flash, Acrobat, Reader, Office, and Windows.
So Adobe announced the bug (i.e. made it known to hackers everywhere), but didn't fix it. Smart?
_________________
- Windows Server and Windows what are the differences?
- United Kingdom: Facebook is about digital gangsters
- Microsoft releases free Office app for Windows 10
- Windows 10 1903 will give you access to Linux files
- Remove Internet Explorer from Windows 10. You don't need it.
- Windows 10: How do I do a Fresh start and why?
