 |
Security News
Avira protects against the exploitation of PDF / Flash files
Thu, 23 July 2009
Attackers can use manipulated PDF files to exploit a vulnerability in Flash Player so that damaging code can gain entry
Tettnang, 23 July 2009 – Vulnerability has come to light in Adobe Flash Player, an application that is installed on almost every computer, and which is currently being used by cybercriminals to plant Trojans by means of specially prepared PDF files. Avira’s virus protection detects and blocks the problem files.
Adobe is currently investigating the problem, but so far there is no sign of an update that could resolve the difficulty. That’s why users should exercise particular caution and should not use Adobe Reader to open unsolicited PDF documents or files from less trusted sources. Because this security problem is unknown in other PDF readers at present, Avira recommends that users work with alternative programs for the time being.
As it is also possible that damaging code could be smuggled in by drive-by download attacks, Flash Player should be disabled in the Web browser using the add-on manager. The internal Flash Player of the Adobe Reader should also be disabled until an update becomes available: in the “Edit” menu, go to “Preferences” and then "Multimedia Rights (older versions)" and change the "Rights for Adobe® Flash® Player" to "Never" or "Prompt”.
Avira’s security solutions detect the damaging PDF files currently distributed with VDF file 7.01.05.21 as EXP/Pidief.TH; the damaging code installed by these files is detected and blocked by VDF file 7.01.05.20 as TR/Drop.Wmach and TR/Spy.WMach. Avira AntiVir Premium and the Avira Premium Security Suite also provide comprehensive protection from drive-by downloads with WebGuard.
About Avira
Avira is a leading global provider of IT security solutions for professional and private use. With over twenty years of experience, the company is one of the pioneers in this field. As a foundation member of the initiative “IT Security made in Germany” (ITSMIG e.V.), Avira guarantees that it provides IT security products with no backdoors.
The German IT security expert is headquartered in Tettnang near Lake Constance and maintains several subsidiaries worldwide. Avira employs approximately 300 staff and makes a significant contribution towards the security of millions of private users through its free virus protection, Avira AntiVir Personal.
Domestic and international customers include well-known companies listed on global stock exchanges, educational establishments and government authorities. In addition to protecting the virtual environment, Avira promotes the Auerbach Foundation for greater protection and security in the real world. The Auerbach Foundation supports charitable and social projects, as well as art, culture and science.
Print this page
|
 |