Hello WAMUGers,

FYI the latest version of Adobe Acrobat Reader is 6.1 & can be downloaded here:
It is a 21.0MB download.

http://www.adobe.com/products/acrobat/readstep2.html

I read the article below in The Age on Friday & decided to send it to WAMUG in case someone has not heard about it.

------------------------------------------------------------------------ ------------------------------------------------------------------------ -----------
http://www.theage.com.au/articles/2004/03/05/1078378951326.html


By Sam Varghese
March 5, 2004

Security consulting firm NGSSoftware has advised users of version 5.1 of Adobe Acrobat Reader to upgrade to the latest version following the discovery of a highly critical vulnerability that could lead to the leaking of data.

NGSSoftware found a data format buffer overflow in this version of the popular software, which could potentially be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the debugging functionality when parsing documents in the XML forms data format (".xfdf"). This can be exploited to cause a buffer overflow by tricking a user into viewing a specially crafted XFDF document.

NGSSoftware said it had contacted Adobe and been told that the latest version of the reader, 6.0, did not suffer from this flaw. ------------------------------------------------------------------------ ------------------------------------------------------------------------ -----------

Cheers,
Ronni

"From what we get, we can make a living; what we give, however, makes a life. " - Arthur Ashe