Adobe Reader 9.4.7 for Windows security update

Adobe has been released Adobe Reader 9.4.7 for Windows. This update resolves two critical vulnerabilities in Adobe Reader 9.4.6 and earlier versions for Windows. These vulnerabilities (CVE-2011-2462, referenced in Security Advisory APSA11-04, and CVE-2011-4369) could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe recommends users of Adobe Reader 9.4.6 and earlier versions for Windows update to Adobe Reader 9.4.7.

Affected software versions
  • Adobe Reader 9.4.6 and earlier 9.x versions for Windows, Macintosh and UNIX.

How to update Adobe Reader 9.4.7:
Users on Windows can utilize the product's update mechanism. The default configuration is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.

Download Adobe Reader 9.4.7:
New users on Windows can download Adobe Reader 9.4 from website listed below:

What's new in Adobe Reader 9.4.7:
Adobe Reader 9.4.7 contains fixes the following security issues:
  • Resolve a memory corruption vulnerability in the U3D component that could lead to code execution (CVE-2011-2462).
  • Resolve a memory corruption vulnerability in the PRC component that could lead to code execution (CVE-2011-4369).

Source: Adobe - Security bulletin (apsb11-30)

No comments: