Adobe fixes Download Manager code execution bug

Written by James Delahunty @ 23 Feb 2010 7:03 User comments (3)

Adobe Systems said on Tuesday that it patched a critical vulnerability that affected the Adobe Download Manager. The Download Manager is used when Internet users download Flash or Reader software from Adobes websites.

A critical vulnerability was discovered that could be used by attackers to remotely install malicious software on a victims PC. In order to fulfill an exploit, an attacker would lead the victim to a special modified link on the adobe.com domain.

The combination of the two combined to make a very serious security threat. The download manager is usually removed from a users' PC as soon as a computer is restarted. Users of the download manager in the past can ensure security by making sure the directory - C:Program FilesNOS - is not present.

More information on the issue is available at:
http://www.adobe.com/support/security/bulletins/apsb10-08.html

<Acer decides to hold back on e-book reader >iPhone is top shipped smartphone in 2009

3 user comments

123.2.2010 19:09

blueboy09

Send private message to this user

Senior Member

Well, they did say that Adobe would be targets for alleged hackers? Guess they aren't kidding now, are they?

225.2.2010 05:01

nrmsmith

Send private message to this user

Junior Member

It really annoys me that Adobe forces me to download their Download Manager just so it can "manage" my download of a 1-2 MB Flash Install file

34.3.2010 13:13

dbminter

Send private message to this user

Member

Quote:
Users of the download manager in the past can ensure security by making sure the directory - C:Program FilesNOS - is not present.

For those who are not savvy, C:Program FilesNOS should read C:\Program Files\NOS NOS will be a folder that is inside the Program Files folder in the root of the C: drive.

Just a typo, folks. :)

Comments have been disabled for this article.

	Android 16 will launch sooner than expected (01 Nov 2024 6:45) Google announced that upcoming Android 16 will break the traditional once-a-year cycle of major Android launches. Next Android is poised to launch in Q2 of 2025, so Android 16 should ship before end of June, 2025.
	Winamp ends its "open source" project that wasn't really open source (20 Oct 2024 11:12) Less than a month after the legendary MP3 player Winamp made its source code public, the company has made a sudden U-turn and removed its code from distribution. 2 user comments
	Winamp released its source code - but didn't go open source (25 Sep 2024 12:38) The source code of Winamp has now been officially released. However, it hasn't become a pure open-source project, as its licensing terms prohibit the creation of new, different versions.
	Does your phone rattle? Here's why it happens (25 Aug 2024 8:30) When you shake your phone and hear a light rattle, clatter, or jingle, it's likely not broken. The culprit is probably the optical image stabilization (OIS) system in your phone's camera, meaning everything is functioning as it should. 2 user comments
	CEO of Messaging App Telegram Arrested in France (25 Aug 2024 7:12) French authorities have detained Pavel Durov, CEO of the messaging service Telegram, amidst an ongoing investigation to determine whether Telegram moderates its platform adequately. 1 user comment

	What happens if you don't update Android? Sometimes it can be tempting to avoid updating to a new Android version. What happens if you decide to delay major updates to the OS?
	GUIDE: Wi-Fi speeds are slow? Here are some tips Having problems with Wi-Fi speed and stability at home? Here are some tips to follow to alleviate the issues. 1 user comment
	Does your phone rattle? Here's why it happens When you shake your phone and hear a light rattle, clatter, or jingle, it's likely not broken. The culprit is probably the optical image stabilization (OIS) system in your phone's camera, meaning everything is functioning as it should. 2 user comments
	Guide: Is Your Wi-Fi Sluggish or Slow? Here's How to Fix Do you have problems with you Wi-Fi? Slow connection or is it cutting off constantly? This guide aims to remedy these problems. 1 user comment
	What IP rating for dust and water resistance means An IP classification (such as IP68) is given to mobile phones, Bluetooth speakers, and other devices, but what do these classifications mean? 1 user comment

Adobe fixes Download Manager code execution bug

3 user comments

Latest news

Reviews

Guides

News archive

Subscribe

Sections:

Follow us:

	Roborock S8 MaxV Ultra review - obstacle avoidance doesn't work as it should, otherwise almost perfect robot vacuum We put the Roborock S8 MaxV Ultra through a very, very long review process. The $1800 mopping robot vacuum is almost perfect, but its obstacle avoidance was surprisingly bad, considering the price - and compared to its competitors.
	Sharge x OnePlus Pouch review: Beautiful power bank that supports SuperVOOC charging In our review, we take a look at Sharge's power bank that supports OnePlus SuperVOOC quick charging technology as well as standard USB PD charging. It has small design flaws, but despite those, the Pouch is very nice product. 1 user comment
	Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets Roomba Combo j7+ is the very first Roomba model to combine robot vacuum with mopping features. And Roomba Combo j7+ does all that with a very clever trick, which tackles the problem with mopping and carpets. But is it any good? We found out.