Adobe Reader more secure after version 9

But old versions hang on for a long time

Adobe Reader's automatic patching feature could at last be stemming the tide of attacks exploiting vulnerabilities in the PDF reader, the latest Top Cyber Security Risks Report from SANS and its partners has suggested.

Using vulnerability data from co-author Qualys, Acrobat version 9 has now achieved a patching 'half life' - the time it takes for patches to reach more than 50 per cent of affected systems - of around 15 days, similar to the 14.5 days for the Windows OS itself.

Versions 7 and 8, which lack the automatic updating fared far worse, with patching half lives of 65 days during 2009. Even after six months, the patching 'persistence' rate (the level of non-patching) was 45 per cent, falling to 40 per cent over following months.

As far as pre-version 9 versions are concerned, patching appears to be a low priority. PDF exploits, meanwhile, keep coming a rate that marks it out as a major security problem for companies and consumers alike.

50 per cent of Acrobat Reader installations still use the older versions of Acrobat.

More widely, old attack types are still unexpectedly prevalent, even years after they were first seen, and are still finding unpatched targets.

June of this year, in particular, saw a sudden spike in injection attacks on older SQL Server 2000 databases exploiting the long-ago XP_CMDSHELL vulnerability. Most of these originate in China, which appears to have a large population of unpatched SQL databases, and to a lesser extent the US.

Another ancient issue is SQL Slammer worm, with up 32 million detected attacks per month, almost all from Chinese systems against the education sector. More recent threats such as Conficker also continue to pester at significant levels, despite falling to lower levels in the first half of 2010.

The 2010 Top Cyber Security Risks Report, compiled by Qualys, HP TippingPoint DV Labs, The SANS Internet Storm Center can be downloaded from the DVLabs website.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags securityadobePersonal Tech

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E Dunn

Techworld
Show Comments

Cool Tech

Breitling Superocean Heritage Chronographe 44

Learn more >

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?