 




<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Irregular Expressions &#187; nist</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/Irregular-Expressions/tag/nist/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/Irregular-Expressions</link>
	<description>Insight into current security related events and exploits, including virtualization security and tips.</description>
	<lastBuildDate>Sun, 28 Apr 2013 08:00:32 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Adobe 0-Day</title>
		<link>http://itknowledgeexchange.techtarget.com/Irregular-Expressions/adobe_0-day/</link>
		<comments>http://itknowledgeexchange.techtarget.com/Irregular-Expressions/adobe_0-day/#comments</comments>
		<pubDate>Fri, 29 Oct 2010 04:46:27 +0000</pubDate>
		<dc:creator>Dan O'Connor</dc:creator>
				<category><![CDATA[0-day]]></category>
		<category><![CDATA[adobe]]></category>
		<category><![CDATA[exploits]]></category>
		<category><![CDATA[nist]]></category>

		<guid isPermaLink="false">http://itknowledgeexchange.techtarget.com/Irregular-Expressions/why-adobe-is-or-will-be-the-number-one-attack-vector/</guid>
		<description><![CDATA[http://www.adobe.com/support/security/advisories/apsa10-05.html Not that this is anything special, its the remediation steps that caught my eye. Also the number of platforms affected. Just delete the lib! Adobe Reader and Acrobat 9.x - Windows Deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x mitigates the threat for those products, [...]]]></description>
				<content:encoded><![CDATA[<p>http://www.adobe.com/support/security/advisories/apsa10-05.html</p>
<p>Not that this is anything special, its the remediation steps that caught my eye. Also the number of platforms affected.</p>
<p>Just delete the lib!</p>
<pre><strong>Adobe Reader and Acrobat 9.x - Windows</strong>
          Deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and
          Acrobat 9.x mitigates the threat for those products, but users will experience a non-exploitable
          crash or error message when opening a PDF file that contains Flash (SWF) content.</pre>
<pre>The authplay.dll that ships with Adobe Reader and Acrobat 9.x
 for Windows is typically located at C:\Program Files\Adobe\Reader
9.0\Reader\authplay.dll for Adobe Reader or C:\Program
Files\Adobe\Acrobat 9.0\Acrobat\authplay.dll for Acrobat.</pre>
<pre><strong>Adobe Reader 9.x - Macintosh </strong>
          1) Go to the Applications-&gt;Adobe Reader 9 folder.
2) Right Click on Adobe Reader.
3) Select Show Package Contents.
4) Go to the Contents-&gt;Frameworks folder.
          5) Delete or move the AuthPlayLib.bundle file.</pre>
<pre><strong>Acrobat Pro 9.x - Macintosh</strong>
          1) Go to the Applications-&gt;Adobe Acrobat 9 Pro folder.
2) Right Click on Adobe Acrobat Pro.
3) Select Show Package Contents.
4) Go to the Contents-&gt;Frameworks folder.
          5) Delete or move the AuthPlayLib.bundle file.</pre>
<pre><strong>Adobe Reader 9.x - UNIX </strong>
          1) Go to installation location of Reader (typically a folder named Adobe).
          2) Within it browse to Reader9/Reader/intellinux/lib/ (for Linux) or Reader9/Reader/intelsolaris/lib/ (for Solaris).
        3) Remove the library named "libauthplay.so.0.0.0."</pre>
<p>NIST has a little more information.</p>
<p>http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1285</p>
<p>I really just want to know what the purpose of the DLL file is, but that seems to be hard to find.</p>
<!-- wpms-network-global-inserts -->]]></content:encoded>
			<wfw:commentRss>http://itknowledgeexchange.techtarget.com/Irregular-Expressions/adobe_0-day/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
