The latest threat from Adobe is the zero-day PDF exploit, which comes disguised as a golf lesson, can do pretty much anything. It can download malicious bots; it can load keystroke-tracking software, and more. The exploit bypasses two important defenses that Microsoft erected to protect Windows, ASLR (address space layout randomization) and DEP (date execution prevention).
A critical vulnerability exists in Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh. This vulnerability (CVE-2010-2883) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild.
Amazon has released Kindle software update version 2.3 which includes PDF support.
Other features are:
- Longer battery life for Kindle (Global Wireless): You can now read for up to 1 week on a single charge with wireless on. Turn wireless off and read for up to 2 weeks.
- Built-in PDF reader: Your Kindle can now display PDF documents without losing the formatting of the original file. Send PDF documents directly to your Kindle (via your @Kindle address) or drag and drop PDF files from your computer to your Kindle (when connected via USB).
- Manual screen rotation: The Kindle screen can now manually rotate between portrait and landscape views so you can see the entire width of a web page or magnify the page of a PDF file. The page-turn buttons work the same in either orientation, and the 5-way controller movements are switched to match the orientation.
- Option to convert PDF files to Kindle format. If you prefer to have your personal PDF documents converted to the Kindle format (so that they can reflow), type “Convert” in the subject of the e-mail when you submit your personal document to your @kindle.com address.
Now you can avoid using Adobe Acrobat when you view PDF documents via GMail. Google has added the view PDF functionality within GMail. A very good feature since Adobe Acrobat can be slow.