Gladiator Research and Security

GSA Reference Number: AD091215-01

Simply Put: A new Adobe Acrobat/Reader remote code execution vulnerability has been observed in targeted attacks on the Internet.  This vulnerability has been confirmed by Adobe; however, no patch is available at this time.  Adobe Reader and Acrobat 9.2 and earlier versions are confirmed as vulnerable.  Although this vulnerability is not in widespread use as of yet, Gladiator believes it will become so in the near future.

Happy Holidays!  This is just a reminder that the Holidays are always a very active time for the “bad guys.”  Malware writers and phishers prey on our cheery attitudes and overactive messaging habits to slip in malicious emails.  There are a few popular attacks that pop up like clockwork around the holidays each year, and so you should make your users aware of these attacks.

GSA Reference Number: AD091209-01

Simply Put: Adobe has released a critical patch to address seven security vulnerabilities regarding its Flash Player and Adobe Air products. Flash is used on most websites for active content, such as animated or interactive menus and images, and movies.  Adobe Air allows users to run active web content outside of a browser.  These vulnerabilities have been rated Critical and could lead to remote code execution or information disclosure.  Flash versions older than 10.0.42.34 and Air versions older than 1.5.3 are affected by these issues.  Gladiator recommends that these patches are applied to all workstations as soon as possible. Users running Flash Player 9 should upgrade to version 10 at this time.

Microsoft has announced six new patches for its monthly patch release cycle.  These patches are for Microsoft Windows and Microsoft Office.  Three patches are rated Critical and affect Microsoft Windows and Microsoft Office, allowing for remote code execution on vulnerable systems.  Gladiator recommends that users immediately apply all Critical patches to their systems. Detailed information for the patches can be found in Microsoft’s December Security Bulletin.  Summary information is included below:

GSA Reference Number: AD091203-01

Simply Put: A fraudulent email is currently circulating that appears to be from the Center for Disease Control (CDC).  The email scam informs recipients that they need to register with the CDC due to the launch of a ficticious “State Vaccination H1N1 Program.”  There is a link in the email that will forward users to a fake website that will actually install the ZeuS Trojan.