Updating Java and Acrobat reader ....

John Shott shott at stanford.edu
Fri Apr 16 08:15:11 PDT 2010


SNF Lab Members:

The folks that distribute malware have apparently begun to exploit both 
Java run from within a browser and Adobe Acrobat Reader to download 
unwanted software onto your machines.  While this does not affect Remote 
Coral in any way, if you do not have the latest versions of Java and 
Acrobat Reader installed on your desktop machines and laptops, you could 
be at risk when visiting other web sites or opening PDF documents.

On Windows machines, if you open up your control panel, you should have 
an icon for Java.  If you open that, it will have a tab named Update and 
on that panel is a button named "Update Now" which will download and 
install the latest Java Runtime Environment 1.6.0_20.  Note:  this may 
also offer to install either a Yahoo menu bar and a backup product named 
Carbonite .... and, I think, pre-checks those check boxes.  If you don't 
want to install these things, make sure that you look at and read each 
page rather than blindly clicking "Next".

In Adobe Reader, if you get a pop up window labeled "Launch File" that 
claims that it wants to launch an application from a PDF document, be 
careful.  This may be a bad guy trying to download something undesirable 
onto your machine.

More details about these threats are at:

http://krebsonsecurity.com/2010/04/java-patch-targets-latest-attacks/

Note: for Mac users, I don't know whether Apple has released a version 
of their JRE to thwart these threats.

Thanks,

John






More information about the labmembers mailing list