Adobe Reader more secure after version 9

But old versions hang on for a long time

Adobe Reader's automatic patching feature could at last be stemming the tide of attacks exploiting vulnerabilities in the PDF reader, the latest Top Cyber Security Risks Report from SANS and its partners has suggested.

Using vulnerability data from co-author Qualys, Acrobat version 9 has now achieved a patching 'half life' - the time it takes for patches to reach more than 50 per cent of affected systems - of around 15 days, similar to the 14.5 days for the Windows OS itself.

Versions 7 and 8, which lack the automatic updating fared far worse, with patching half lives of 65 days during 2009. Even after six months, the patching 'persistence' rate (the level of non-patching) was 45 per cent, falling to 40 per cent over following months.

As far as pre-version 9 versions are concerned, patching appears to be a low priority. PDF exploits, meanwhile, keep coming a rate that marks it out as a major security problem for companies and consumers alike.

50 per cent of Acrobat Reader installations still use the older versions of Acrobat.

More widely, old attack types are still unexpectedly prevalent, even years after they were first seen, and are still finding unpatched targets.

June of this year, in particular, saw a sudden spike in injection attacks on older SQL Server 2000 databases exploiting the long-ago XP_CMDSHELL vulnerability. Most of these originate in China, which appears to have a large population of unpatched SQL databases, and to a lesser extent the US.

Another ancient issue is SQL Slammer worm, with up 32 million detected attacks per month, almost all from Chinese systems against the education sector. More recent threats such as Conficker also continue to pester at significant levels, despite falling to lower levels in the first half of 2010.

The 2010 Top Cyber Security Risks Report, compiled by Qualys, HP TippingPoint DV Labs, The SANS Internet Storm Center can be downloaded from the DVLabs website.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags adobePersonal Tech

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E Dunn

Techworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?