Adobe software hit again by hackers

A zero-day exploit appears to have hit drawing tool Adobe Illustrator.

Adobe Flash logo

Adobe has been hit with a whammy of security issues, with Adobe Illustrator suffering a zero-day exploit and its Flash and Air software requiring patches for critical flaws.

Exploit code is available for the Illustrator vulnerability, with security firm Secunia confirming versions CS3 13.0.0 and CS4 14.0.0 are affected.

Hackers taking advantage of the exploit would be able to take over a user's computer if the victim opened a maliciously crafted Encapsulated Postscript File (.eps).

Advertisement - Article continues below

Adobe said it was investigating the issue, and would have an update when it had more information.

The company will also update its Flash Player and Air software next Tuesday due to critical security issues.

Updating Flash Player is not part of Adobe's regular patching cycle, which was intended to fix flaws in Adobe's PDF reader.

However, Mozilla has already made efforts to fix security problems in Flash, by warning users if Adobe Flash was out of date every time a new version of Firefox was downloaded.

Last week, F-Secure chief security officer Miko Hypponen said that Adobe needed to make moves to make sure that its popular plugin and add-on software was updated automatically.

It was a way for hackers to get through to computer users without having to deal with patched operating systems like Windows 7.

Advertisement
Advertisement - Article continues below

Hypponen said that Adobe Flash software users had on their systems was usually out of the date, and there needed to be a way that these were updated automatically.

He said at the time: "Most of them are not up to date. Microsoft can do this, so Adobe should be able to do this as well."

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/security/355013/10-quick-tips-to-identifying-phishing-emails
Security

10 quick tips to identifying phishing emails

16 Mar 2020
Visit/business-strategy/mergers-and-acquisitions/354941/panda-security-to-be-acquired-by-watchguard
mergers and acquisitions

Panda Security to be acquired by WatchGuard

9 Mar 2020
Visit/pdf-software/29855/why-it-s-time-to-take-your-documents-digital
document management systems (DMS)

Why it’s time to take your documents digital

7 Feb 2020
Visit/infrastructure/server-storage/354508/synology-flashstation-fs3400-same-old-same-old
Server & storage

Synology FlashStation FS3400: Same old, same old

9 Jan 2020

Most Popular

Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/software/video-conferencing/355138/zoom-beaming-ios-user-data-to-facebook-for-targeted-ads
video conferencing

Zoom beams iOS user data to Facebook for targeted ads

27 Mar 2020
Visit/cloud/355098/ibm-dedicates-supercomputing-power-to-coronavirus-researchers
high-performance computing (HPC)

IBM dedicates supercomputing power to coronavirus research

24 Mar 2020
Visit/software/355113/companies-offering-free-software-to-fight-covid-19
Software

These are the companies offering free software during the coronavirus crisis

25 Mar 2020