Adobe Systems is working to fix a glitch in software it uses to speed up downloads of its products that could give hackers a way to push malicious programs onto a victim's PC.
According to security researcher Aviv Raff, Download Manager -- a small program Adobe users to speed up the initial installation of its products -- can be misused to force victims to install unwanted software on their computers.
Because of an undisclosed flaw in the way Download Manager works, the "attacker can force an automatic download and installation of any executable he desires," Raff wrote in a blog post. "So, if you go to Adobe's Web site to install a security update for Flash, you really expose yourself to a zero-day attack."
More: http://www.computerworld.com/s/article/9159218/
According to security researcher Aviv Raff, Download Manager -- a small program Adobe users to speed up the initial installation of its products -- can be misused to force victims to install unwanted software on their computers.
Because of an undisclosed flaw in the way Download Manager works, the "attacker can force an automatic download and installation of any executable he desires," Raff wrote in a blog post. "So, if you go to Adobe's Web site to install a security update for Flash, you really expose yourself to a zero-day attack."
More: http://www.computerworld.com/s/article/9159218/