Re: WARNING: Adobe Reader risks



"Bill Drake" wrote:

Hi, PA Bear. The linkage, is that Adobe Reader V8.1.2 Security
Update 1 is actually a Microsoft KB update. If you check
Add/Remove after Reader V8.1.2 Security Update 1 is installed,
you will see it refers to MS KB403742 as the required fix.

I assume from this that KB403742 is what is actually being
referenced by Adobe's fix, but this is also incompletely and
imperfectly documented.


The problem is that historically, Adobe have left behind old
product installation "mortal remains" when doing updates using
their reader-based update procedure. As a result, the best fix
for problems with Adobe Reader has been to uninstall the old
product using Add/Remove and then go to Adobe's website
and get their latest-'n-greatest. That's what I did, which caused
me to run into the problem described in my original post.

However, in this case, you end up with an installation of a newer
product and a website reference when checking the new product
indicating that the new product is still a beta release. Ergo, this
thread.


My solution to the problem, at least in the short term, is to use the
Update procedure on an *existing* V8.1.2 installation to get the
V8.1.2 Security Update 1 - bypassing the Adobe website that
gives you V9.0 without properly warning you that a major version
update has occurred.

As detailed above, and to reiterate, the linkage with this newsgroup
is that V8.1.2 Security Update 1 is actually an MS KB403742 update.


Best I can do for now. <tm>


Bill



PA Bear [MS MVP] wrote:
The Adobe Reader link off Adobe's main page now tells you
that Adobe Reader 9.0 and Adobe Air are the latest download,
without informing you there has been a version update. The
page looks identical to the old 8.1.2 page - there is NO
NOTIFICATION of a major version change.

What they DON'T tell you until the product is installed is these
items are still in beta.

Acrobat Reader v9 is not a beta build, although it does include
access to Adobe.com (beta)
http://blogs.adobe.com/adobereader/2008/06/adobe_reader_9_is_here_1.html

Furthermore, when you go to the Downloads page at the
Adobe site and select the Reader 8.1.2 download, it takes
you back to the 9.0 page and offers you the 9.0 download.
There is no way to get the 8.1.2 package back.

Acrobat Reader v8.1.2 has been superseded by v8.1.2 Security Update 1
http://www.adobe.com/support/security/bulletins/apsb08-15.html
http://www.adobe.com/support/downloads/detail.jsp?ftpID=3967

That being said, what does all this have to do with Windows Update,
Bill?

Bill Drake wrote:
Adobe have joined the mob of Software Houses pushing
betas on an unsuspecting public without adequate warning.

The Adobe Reader link off Adobe's main page now tells you
that Adobe Reader 9.0 and Adobe Air are the latest download,
without informing you there has been a version update. The
page looks identical to the old 8.1.2 page - there is NO
NOTIFICATION of a major version change.

What they DON'T tell you until the product is installed is these
items are still in beta. You find that out once the download is
installed.

Furthermore, when you go to the Downloads page at the
Adobe site and select the Reader 8.1.2 download, it takes
you back to the 9.0 page and offers you the 9.0 download.
There is no way to get the 8.1.2 package back.


At this point, I don't know if the webpages are inaccurate or
the product is still beta. And the only reason I'm posting this
here is because I don't have any idea how to let people know
about this in a widespread manner - other than this newsgroup.

The security and system integrity risks of using beta software
are well known to members of this newsgroup. As a result of
this irresponsible action on Adobe's part - without any kind of
explanation or rationale for their action - I now recommend the
same caution when dealing with Adobe on software matters
as I would in dealing with shady or corrupt software
manufacturers.


Best I can do for now. <tm>


Bill





.

Relevant Pages

  • Re: WARNING: Adobe Reader risks
    ... Add/Remove after Reader V8.1.2 Security Update 1 is installed, ... Adobe have left behind old ... However, in this case, you end up with an installation of a newer ... Adobe site and select the Reader 8.1.2 download, ...
    (microsoft.public.windowsupdate)
  • Re: Probleme mit Anzeige eines PDF in einem Form
    ... Ich habe einen Verweis auf eine "Adobe Acrobat 8.0 Browser Control Type Library 1.0", auf dem Form liegt das pdf.ocx ... Auf dem PC waren Acrobat 8.0 und Reader 8.1.0 installiert. ... dass nach der nachträglichen Installation von Adobe 6 in der Registry einige Werte auf die "falsche" Version zeigen. ...
    (microsoft.public.de.access)
  • Re: Probleme mit Anzeige eines PDF in einem Form
    ... Aus dem Frm wird so wie früher das OCX mit dem Reader dargestellt. ... Ich habe einen Verweis auf eine "Adobe Acrobat 8.0 Browser Control Type ... Durch die Deinstallation und die erneute Installation des Adobe Readers ...
    (microsoft.public.de.access)
  • Re: Probleme mit Anzeige eines PDF in einem Form
    ... Ich habe einen Verweis auf eine "Adobe Acrobat 8.0 Browser Control Type Library 1.0", auf dem Form liegt das pdf.ocx ... Auf dem PC waren Acrobat 8.0 und Reader 8.1.0 installiert. ... dass nach der nachträglichen Installation von Adobe 6 in der Registry einige Werte auf die "falsche" Version zeigen. ...
    (microsoft.public.de.access)
  • Re: IE will not access HTTPS sites Suddenly
    ... I have been too busy to uninstall Adobe, ... I will see how many places it appears once I do the uninstall. ... Did you install the older version of the Reader using the Run from the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
Loading