Gladiator Research and Security

GSA Reference Number: AD101117-01

Simply Put: Adobe has released an update for Adobe Acrobat and Reader versions 9.4 and earlier. This update fixes a publicly disclosed vulnerability that is currently being used to attack systems on the Internet.  This is a critical issue, and the patch should be applied as soon as possible.

Microsoft has announced three new patches today to fix vulnerabilities that could allow remote code execution and elevation of privileges.  One patch is rated Critical by Microsoft and affects Microsoft Office.  Two patches are rated Important by Microsoft and affect Microsoft Office and Microsoft Forefront United Access Gateway.  Gladiator recommends that users with impacted systems apply all Critical patches immediately. Detailed information regarding the patches can be found in Microsoft’s November Security Bulletin. 

Microsoft has released information about a new vulnerability that could potentially affect many Internet Explorer users.  This vulnerability could potentially allow remote code execution if the victim visits certain malicious websites.  Microsoft is aware of the vulnerability and working to quickly release patches.  Currently, all production versions of Internet Explorer are affected and this includes versions 6, 7, and 8.  The Internet Explorer 9 beta is not vulnerable to this vulnerability.  To mitigate the vulnerability, users are advised to upgrade to Internet Explorer 8 and enable Data Execution Prevention (DEP).  Disabling scripting or ActiveX controls will also prevent the malicious scripts from running.

GSA Reference Number: AD101105-01

Simply Put: Multiple Adobe products are vulnerable to some new high-risk remote code execution issues.  First off, Adobe Flash Player versions earlier than 10.1.85.3 have critical vulnerabilities that can be exploited by an attacker to take control of affected systems.  Adobe has released an update for Flash.  Second, Adobe Acrobat and Reader versions 9.4 and earlier are vulnerable to a similar issue because they implement Flash features through an authplay.dll file that can be called from a PDF.  Finally, Adobe Shockwave Player is vulnerable to attack through a remote code execution issue, as well.  There are no patches available for the Adobe Acrobat, Reader or Shockwave Player vulnerabilities.