Adobe Reader/Acrobat 7 Support Sunset

| | Comments (2) | TrackBacks (0)

I can not find a statement on Adobe’s website saying they no longer support reader/acrobat versions earlier than 8, but actions speak louder than words.

The security bulletin for the vulnerability currently being exploited states:
Acrobat and Adobe Reader 7.0.9 and earlier versions are also affected by these vulnerabilities. Adobe will provide further information as to the nature of the vulnerabilities via the company's Security Bulletins and Advisories page (http://www.adobe.com/support/security/) once updates are available for all affected versions of Acrobat and Adobe Reader.

That is not very reassuring because the last Adobe Reader/Acrobat security bulletin said the same thing.
Adobe will be providing an update to Adobe Reader 7.0.9 and Acrobat 7.0.9 at a later date.

That update hasn't been released.

We have a large number of users still running 7.0.9 Standard or Professional. I don't expect them to be all that excited about ponying up the dough for the upgrade to 8.x. Version 7 isn't supported with Office 2007 or Vista so they'll have to upgrade fairly soon anyway.

There has been growing talk (in general, not at work) about Adobe Reader and Acrobat alternatives. Adobe's product has become more and more bloated. They then have security bulletins as a result of these extra features. FoxIt Reader doesn't have any reported security vulnerabilities. I don't have any experience with FoxIt, but it sure seems like time to investigate a change that doesn't require multiple updates per year.

Update: Not so fast...
On February 20th, Adobe updated its security bulletin to say:

Acrobat and Adobe Reader 7.0.9 and earlier versions are also affected by these vulnerabilities.

Adobe is planning to release an update to Adobe Reader and Acrobat 7 by the end of May 2008 to resolve these security issues in those versions of the products

Categories

0 TrackBacks

Listed below are links to blogs that reference this entry: Adobe Reader/Acrobat 7 Support Sunset.

TrackBack URL for this entry: http://www.infosecblog.org/mt-tb20071121.pl/681

2 Comments

Acrobat v7 pro user said:

We're still waiting as well. I emailed Adobe last August when they had the last problem. The support reply was "we don't know, talk to Customer Service" The customer service response was "we don't know talk to support".

Roger Author Profile Page said:

Just saw the security bulletin was updated.

http://www.adobe.com/support/security/advisories/apsa08-01.html
"Adobe is planning to release an update to Adobe Reader and Acrobat 7 by the end of May 2008 to resolve these security issues in those versions of the products. "

May is a really long time.

Leave a comment

Powered by Ajax Comments

About this Entry

This page contains a single entry by Roger published on February 14, 2008 8:05 PM.

Secunia Personal Software Inspector 0.9.0.1 was the previous entry in this blog.

Fred - CDW Commercials is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Add to Google
Please contact me by leaving a comment where appropriate. Otherwise, you can click here to reveal an email address for me.
Got Backups? Get Safe Online Remember Rick Rescorla Powered by Movable Type 4.2-en