Andrew Rowlands
Well-known member

Adobe Changes Its Tune On Forcing Paid Upgrade To Fix Security Flaws (updated)
Another source:
http://news.slashdot.org/story/12/0...m_campaign=Feed:+Slashdot/slashdot+(Slashdot)wiredmikey writes with a followup to Thursday's news that Adobe was recommending paid software upgrades in lieu of fixing security holes in some of its applications. After receiving criticism for the security bulletin, Adobe changed its mind and announced that it's developing patches to fix the vulnerabilities. "Developing a patch, especially for three different applications, can be costly and time consuming. Developing these patches consumes development resources, then must run through a QA process, and the patch needs to be communicated and distributed to users. And for a company like Adobe with a massive customer base using its Photoshop, Illustrator, and Flash Professional, the bandwidth cost alone can be substantial. For a popular product that was just over two years old, providing a fix to address a serious security flaw its what customers deserve. And while Adobe may have originally tried to sneak by without addressing the issue and pushing users to upgrade to its new product, the company made the right move in the end."
Another source:
The vulnerabilities in Photoshop could be exploited via opening malicious TIFF image files, Adobe said. It did not describe the possible attack methods targeting Illustrator or Flash Professional. According to Adobe, the security issues--which it characterized as "critical vulnerabilities"--could be exploited "to take control of the affected system."
Last edited: