Adobe Systems is working to fix a glitch in software it uses to speed up downloa
Date: Friday, February 19, 2010 @ 19:06:27 UTC
Topic: Adobe


Software could give an attacker a way to install an unwanted program

Adobe Systems is working to fix a glitch in software it uses to speed up downloads of its products that could give hackers a way to push malicious programs onto a victim's PC.

According to security researcher Aviv Raff, Download Manager -- a small program Adobe users to speed up the initial installation of its products -- can be misused to force victims to install unwanted software on their computers.

 

Because of an undisclosed flaw in the way Download Manager works, the "attacker can force an automatic download and installation of any executable he desires," Raff wrote in a blog post. "So, if you go to Adobe's Web site to install a security update for Flash, you really expose yourself to a zero-day attack."

Adobe said Thursday that it was working with Raff and the third-party developer of the Download Manager product to fix the issue. Download Manager includes an executable program and an ActiveX control or Firefox extension file, depending on which browser is used









This article comes from NB Productions Your guide on the Web since 2000
http://www.nb-productions.com

The URL for this story is:
http://www.nb-productions.com/modules.php?name=News&file=article&sid=627