: Bill Jones wrote:
: > : >> Gordon Darling wrote:
: >>>
http://www.theinquirer.net/?article=14530
: >>>
: >>> Adobe Reader leaks data like a sieve
: >>>
: >>> By INQUIRER staff: Friday 05 March 2004, 07:36 AN AUSTRALIAN
: >>> security consulting firm has told users Acrobat Reader version 5.1
: >>> has a highly critical vulnerability that could lead to the leaking
: >>> of data.
: >>>
: >>> NGSSoftware found a data format buffer overflow in which could
: >>> potentially be exploited to compromise a user's system.
: >>>
: >>> Apparently the vulnerability is caused due to a boundary error
: >>> within the debugging functionality when parsing documents in the
: >>> XML forms data format (".xfdf").
: >>>
: >>> A hacker using the flaw could trick a users into looking at a
: >>> doctored XFDF document which could trigger a buffer overflow.
: >>>
: >>> NGSSoftware contacted Adobe about the flaw and been told that the
: >>> latest version of the reader, 6.0, did not suffer from it. It has
: >>> recommended to all its clients that they upgrade immediately. µ
: >>>
: >>> Regards
: >>> Gordon
: >>
: >> FYI
: >>
: >> Version 6.0.1. of Acrobat Reader was just released today.
: >>
: >> Rob
: >>
: > 6.0.1 has been out for 2 months or more.
: >
: > Bill
:
: Not according to MajorGeeks.com, see
:
http://www.majorgeeks.com/download3852.html
: Perhaps the date is the date they started to list the program. But given
: the popularity, I find that hard to believe.
:
: With all the security problems with Adobe Acrobat products, I thought it
: might have been a security updated version.
:
: Rob
:
:
It's the date they listed it (and like most services, they keep moving the date
forward). Some people only look at the most recent listed programs. I
downloaded 6.0.1 on 12/27/2003.
Bill