PDF Flaws Impact Mac OS Users

Adobe is warning Mac OS users that PDF files are susceptible to an exploit that can allow arbitrary file execution. Products affected include Adobe Reader 7.0 and 7.0.1 and Adobe Acrobat 7.0 and 7.0.1. According to Adobe, "If malicious JavaScript is embedded in PDF files, it is possible to launch arbitrary executables on a local machine." However, the attacker must know the complete path and filename. The vulnerability was first announced on June 27, 2005.

Adobe has issued updates to patch vulnerable versions. Mac OS users of Adobe Reader 7.0 and 7.0.1 and Adobe Acrobat 7.0 and 7.0.1 should visit the Adobe support downloads section to obtain the necessary patches (http://www.adobe.com/support/downloads/).