Adobe fixes Acrobat flaw
Adobe’s latest update download will fix the security flaw found within the Adobe Download Manager software. According to Adobe, “This vulnerability (CVE-2010-0189) could potentially allow an attacker to download and install unauthorised software onto a user’s system.”
The purpose of Download Manager is to update Flash Player and Reader in a secure manner. The bug forced Adobe users to install unwanted software by visiting sites with specially crafted iFrames.
The Download Manager software is designed as for one-time use, and will uninstall itself after a computer restart. Adobe recommends users to verify if a potentially vulnerable version of the software has been uninstalled. If it is not, users are should ensure that the file C:?Program Files?NOS? folder and its contents are deleted.
If, however, the NOS files are present, Adobe suggests users run “services.msc” which will ensure that “getPlus (R) Helper” is not on the list of services. Adobe also recommends you use the Add/Remove feature of Windows to fully delete Download Manager, which will solve the problem outright



Leave a Reply