[HIB]Adobe confirms PDF zero-day, plans rush patch

Adobe today said it would issue an emergency patch the week of Aug. 16 to fix a critical flaw in its Reader and Acrobat software. The bug was disclosed by researcher Charlie Miller at last month's Black Hat security conference when he demonstrated how the open-source BitBlaze toolkit could be used to boost bug-hunting productivity 10-fold. Miller, an analyst with Baltimore-based Independent Security Evaluators, is well-known for finding vulnerabilities in Adobe's popular Reader PDF viewer. Last March, Miller showed how a simple fuzzing tool could root out scores of potential bugs in Reader, Microsoft Office, Apple's Preview and other software. According to a paper Miller published after the Black Hat conference and others, the bug is in Reader's and Acrobat's font parsing.

**Hidden Content: To see this hidden content your post count must be 1 or greater.**