Forum Thread: Adobe Acrobat reader

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
cmethuen Adobe Acrobat reader
Member 15th Sep, 2009 19:04
Ranking: 1
Posts: 18
User Since: 21st Nov, 2008
System Score: N/A
Location: N/A
Last edited on 15th Sep, 2009 19:04

I have just updated to the latest version of Adobe Acrobat Reader (which brought a whole lot of other stuff with it: aodobe.com - adobe air - adobe downloader... do I really need / want that?)

Secunia is giving me an insecure report on version 9.0.155.0, but that is what is on abobe's website. Do I need to wait for Secunia to catch up or am I missing someting here?

Thanks
CM

Maurice Joyce RE: Adobe Acrobat reader
Handling Contributor 15th Sep, 2009 22:30
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
This Forum is littered with problems from Adobe products not least the Reader & the add on's it installs.
I have copied a previous post to try & help U.

Adobe Reader.
When Adobe free PDF Reader is downloaded it also installs the following programmes:

Adobe.com
Adobe Air (It has a Flash element)
A Google Toolbar if U do not opt out at the download stage.

These additional elements are not required to make Adobe Reader work therefore if U do not use or know what they do go to Control Panel>add/remove & uninstall them.

If U only use Adobe Reader to read web pages or email attachments U do not have to use Adobe Reader either. The Adobe Reader link splattered all over the web saying "To read this article U require Adobe Reader" is utter nonsense. U really require a suitable PDF reader.

Under these circumstance there are far faster, smaller by download size (Adobe is 35.7MB - Foxit 5.04MB) & more secure free alternatives.

The most popular is Foxit - details here:

http://www.foxitsoftware.com/

More are available here:
http://pdfreaders.org/

U may also find another programme in add/remove called Adobe Download Manager. The vendor is NOS systems. It is not required to successfully download any Adobe product & can be safely removed.

If your choice is still to use Adobe Reader U should refer to this update site:
http://www.adobe.com/support/downloads/product.jsp...
This site gives the latest downloads & explains the rather odd way Adobe conduct their update business.


This excellent post by @HBR is also worth a read before deciding what to do.

Quote from http://www.sans.org/newsletters/newsbites/newsbite...

"[Editor's Note (Northcutt): I think organizations should avoid Adobe if possible. Adobe security appears to be out of control, and using their products seems to put your organization at risk. Try to minimize your attack surface. Limit the use of Adobe products whenever you can. ]"

There are lots of other free PDF-readers like Foxit Reader, Sumatra PDF etc. So at least we can do without Adobe Reader. The only Adobe product I currently use is Adobe Flash.

http://www.foxitsoftware.com/pdf/reader
http://blog.kowalczyk.info/software/sumatrapdf/ind...
http://pdfreaders.org/



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Maurice Joyce RE: Adobe Acrobat reader
Handling Contributor 15th Sep, 2009 22:30
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
This Forum is littered with problems from Adobe products not least the Reader & the add on's it installs.
I have copied a previous post to try & help U.

Adobe Reader.
When Adobe free PDF Reader is downloaded it also installs the following programmes:

Adobe.com
Adobe Air (It has a Flash element)
A Google Toolbar if U do not opt out at the download stage.

These additional elements are not required to make Adobe Reader work therefore if U do not use or know what they do go to Control Panel>add/remove & uninstall them.

If U only use Adobe Reader to read web pages or email attachments U do not have to use Adobe Reader either. The Adobe Reader link splattered all over the web saying "To read this article U require Adobe Reader" is utter nonsense. U really require a suitable PDF reader.

Under these circumstance there are far faster, smaller by download size (Adobe is 35.7MB - Foxit 5.04MB) & more secure free alternatives.

The most popular is Foxit - details here:

http://www.foxitsoftware.com/

More are available here:
http://pdfreaders.org/

U may also find another programme in add/remove called Adobe Download Manager. The vendor is NOS systems. It is not required to successfully download any Adobe product & can be safely removed.

If your choice is still to use Adobe Reader U should refer to this update site:
http://www.adobe.com/support/downloads/product.jsp...
This site gives the latest downloads & explains the rather odd way Adobe conduct their update business.


This excellent post by @HBR is also worth a read before deciding what to do.

Quote from http://www.sans.org/newsletters/newsbites/newsbite...

"[Editor's Note (Northcutt): I think organizations should avoid Adobe if possible. Adobe security appears to be out of control, and using their products seems to put your organization at risk. Try to minimize your attack surface. Limit the use of Adobe products whenever you can. ]"

There are lots of other free PDF-readers like Foxit Reader, Sumatra PDF etc. So at least we can do without Adobe Reader. The only Adobe product I currently use is Adobe Flash.

http://www.foxitsoftware.com/pdf/reader
http://blog.kowalczyk.info/software/sumatrapdf/ind...
http://pdfreaders.org/



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
cmethuen RE: Adobe Acrobat reader
Member 15th Sep, 2009 23:07
Score: 1
Posts: 18
User Since: 21st Nov 2008
System Score: N/A
Location: N/A
Thank you: that is all very helpful. I have uninstalled most of what came with it and am going to look at Foxit. However, Acrobat Reader did finally update this evening to where Secunia expected it to be...

And apologies for posting on an FAQ - I did my best to find other posts but obviously was not very efficient about it.
Was this reply relevant?
+0
-0
cmethuen RE: Adobe Acrobat reader
Member 15th Sep, 2009 23:27
Score: 1
Posts: 18
User Since: 21st Nov 2008
System Score: N/A
Location: N/A
Last edited on 15th Sep, 2009 23:33
PS a couple of the links you posted seem not to lead anywhere? (In particular, the "excellent post", and the Kowalczyk blog.)
Was this reply relevant?
+0
-0
ZakMcRofl RE: Adobe Acrobat reader
Member 16th Sep, 2009 00:14
Score: 0
Posts: 4
User Since: 9th Sep 2009
System Score: N/A
Location: N/A
Last edited on 16th Sep, 2009 00:15
I'm sorry but this "solution" is laughable. Why should people uninstall Adobe Reader because Secunia cannot fix their buggy product? I know its free and I appreciate it but a security tool that reports false positives can be quite annoying.

Yes, Adobe Reader has bugs and security holes but at least they fix them after they are reported...

EDIT: See my thread here for details:
http://secunia.com/community/forum/thread/show/272...
Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Acrobat reader
Member 16th Sep, 2009 01:36
on 16th Sep, 2009 00:14, ZakMcRofl wrote:
I'm sorry but this "solution" is laughable. Why should people uninstall Adobe Reader because Secunia cannot fix their buggy product? I know its free and I appreciate it but a security tool that reports false positives can be quite annoying.

Yes, Adobe Reader has bugs and security holes but at least they fix them after they are reported...

EDIT: See my thread here for details:
http://secunia.com/community/forum/thread/show/272...
Maybe PSI is not compatable with OS: Windows 7 x64

Contact Support: support@secunia.com
http://secunia.com/corporate/information/contact
Was this reply relevant?
+0
-0
cmethuen RE: Adobe Acrobat reader
Member 16th Sep, 2009 01:51
Score: 1
Posts: 18
User Since: 21st Nov 2008
System Score: N/A
Location: N/A
It does not seem to me that Secunia is incompatible with my OS, but it does seem that there is sometimes some kind of a discrepancy between how it is reads version numbers on the acrobat reader (for instance - it happens with other programmes too sometimes) and how they are presented in the programme itself.

Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Acrobat reader
Member 16th Sep, 2009 02:11
on 16th Sep, 2009 01:51, cmethuen wrote:
It does not seem to me that Secunia is incompatible with my OS, but it does seem that there is sometimes some kind of a discrepancy between how it is reads version numbers on the acrobat reader (for instance - it happens with other programmes too sometimes) and how they are presented in the programme itself.

Maurice will be along to fix the blog.kowalczyk.info/software/sumatrapdf/ind... link

http://blog.kowalczyk.info works
Was this reply relevant?
+0
-0
ZakMcRofl RE: Adobe Acrobat reader
Member 16th Sep, 2009 07:22
Score: 0
Posts: 4
User Since: 9th Sep 2009
System Score: N/A
Location: N/A
on 16th Sep, 2009 01:36, wrote:
Maybe PSI is not compatable with OS: Windows 7 x64


Yeah and I'm sure everyone else with this problem is running Windows 7,
too *rolleyes*. Besides I also had this before I upgraded from Vista.
Why should this be OS specific?

I would love to solve this, for example by a clean reinstall, but PSI does not uninstall cleanly (as reported). Do you really think people take the time to sign up here just to write bogus bug reports? Feedback is something valuable and it should not be brushed aside if someone takes the time to give it.
Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Acrobat reader
Member 16th Sep, 2009 14:45
on 16th Sep, 2009 07:22, ZakMcRofl wrote:
Yeah and I'm sure everyone else with this problem is running Windows 7,
too *rolleyes*. Besides I also had this before I upgraded from Vista.
Why should this be OS specific?

I would love to solve this, for example by a clean reinstall, but PSI does not uninstall cleanly (as reported). Do you really think people take the time to sign up here just to write bogus bug reports? Feedback is something valuable and it should not be brushed aside if someone takes the time to give it.

With an ID like ZakMcRofl makes me think of this:
http://www.urbandictionary.com/define.php?term=rof...
Was this reply relevant?
+0
-0

This thread has been marked as locked.