[Mimedefang] PDF vulnerability

[WBrown at e1b.org]

Kevin wrote on 02/24/2009 02:16:38 PM:

> Recommending that people disable JavaScript in Adobe I believe is the
only
> current course of action other than blocking PDFs which will likely cause

> people wth pitchforks and torches to storm the IT Castle.

Blocking PDF's is not going to be popular.  Can/will the AV definitions be
able to detect malicious files?

> Other than that, unfortunately I'm hoping March 11th when Adobe is
supposed
> to patch comes quickly without other issues.  Other than that, we'll like

> start sacrificing IT interns as a blood offering.

March 11 is only for version 9 of Acrobat.  Earlier versions will come out
after that.