toggle

AAPL Stock: 118.44 ( -2.86 )

Printed from http://www.macnn.com

Adobe moves to regular patching cycle for PDF tools

updated 11:15 am EDT, Thu May 21, 2009

Adobe adopts patch cycle

Adobe will be adopting a quarterly patch cycle, at least with regard to Reader and Acrobat, explains the company's security and privacy director, Brad Arkin. Patches for the PDF tools should now be released every three months, and on the second Tuesday of said month. The timing is meant to coincide with Microsoft's famous "Patch Tuesdays," Arkin notes, thereby giving IT workers an opportunity to test updates from both companies before propagating them across a network.

While PDF documents are mostly local, static files, they also incorporate JavaScript, which can be used by malicious hackers to generate problems like memory corruption, and in turn assume control of a computer. Arkin admits that Adobe has failed to examine legacy code for these vulnerabilities in the past; testing is now said to be ongoing though, using methods such as threat modeling and fuzzing, the latter of which assaults a program with code until it triggers an unwanted response.

The director also confesses that the company was too slow to fix the recent JBIG2 vulnerability, which was exposed two weeks before a patch became available. Adobe will try to increase the speed of such emergency updates in the future, Arkin says.




by MacNN Staff

POST TOOLS:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

Follow us on Facebook

toggle

Most Popular

Advertisement

Recent Reviews

HP 14-x030nr 14-inch Chromebook

If you're like us, chances are you've come to realize that you need the ability to access the Internet on the go. Also, you've prob ...

15-inch MacBook Pro with Force Touch

Apple's 15-inch Retina MacBook Pro continues to be a popular notebook with professional users and prosumers looking for the ultimate ...

Typo keyboard for iPad

Following numerous legal shenanigans between Typo -- a company founded in part by Ryan Seacrest -- and the clear object of his physica ...

toggle

Most Commented