[lotuseclat79]

About the Adobe and Excel Vulnerabilities.

Both of them are not yet patched.

Above link contains information about the MS Excel problem in a security advisory.

Adobe is planning to release an update on March 11th. That's March 11th, like two weeks from now.

Adobe's mitigation steps involve disabling JavaScript. Above link contains information on how to do this.

-- Tom

[TOGG]

Without wishing to add to anyone's paranoia regarding Adobe products, I read yesterday that the exploit can be made to work even if JavaScript is disabled; http://secunia.com/blog/44/

This clearly is only one view and, as with so many of these things, the Secunia findings, if correct, may be largely theoretical. It is still not clear whether any of the other pdf readers are affected, although, at present, it seems they are not.

I hardly ever use documents in the pdf format and switched to Foxit when it first came out, just to save download time (I'm on dialup!).

[lotuseclat79]

Hi TOGG,

The report mentioned that:
One fortunate mitigating factor is that the exploits are being used for targeted attacks.
Though that isn't very much of a mitigation if you happen to be the target.

-- Tom