Friday, February 09, 2007

Another Adobe Flaw!!!

Issues with Adobe applications are starting to become so common place it's scary. Again, why take on the much added risk with a solution that does not have any 3rd party security certifications? Though Adobe Connect and Adobe Acrobat are different solutions, the Connect solution is 100% dependent on Acrobat.

I previously mentioned that Adobe released a Security Bulletin in October of 2006 for Adobe Connect, which effected older versions of Breeze. Now problems have surfaced with newer versions of Adobe Acrobat. They released a patch for the recently discovered security flaw in their Acrobat software application to resolve the problems.

The company added that the flaw affected Acrobat Standard, Professional, and Elements in versions 7.08 and older. (Only a matter of time before these specific Acrobat issues manifest in Adobe Connect.)

Adobe further confirmed that the recently launched version 8.0 was not affected by this flaw and the users are not required to download any patch.

This flaw was related to a technique known as "cross-site scripting" which allowed hackers to mix malicious JavaScript with a link to a PDF file on a website. (Sounds like the same issues the older version on Connect had. Again, curious to see when the current version on Adobe Connect starts to see similar problems.)

Adobe Connect Security Problems
Adobe Connect History
Same Song and Dance

Thanks,

David Chao
The Web Conferencing Expert