News 

The company discovered a buffer overflow vulnerability in Acrobat 6.x caused by a boundary error when distilling. This can be exploited to cause a buffer overflow via a specially crafted file. It has also found an insecure default permissions vulnerability in both Acrobat 6.x and Adobe Reader 6.x. Caused by insecure default file permissions being set on the installed files and folders, the flaw allows non-privileged users on the system to remove the files or replace them with malicious binaries.

Updates to version 6.0.5 are available for Reader and Acrobat Standard and Professional from adobe.com/support/downloads.

The Acrobat patch also fixes a potential file bloat issue when Adobe LiveCycle Reader Extensions software is used and enables Flash 8 content to be displayed correctly within Reader.