6 Replies Latest reply on Mar 23, 2011 6:39 AM by Dave Merchant

    10.0.2 reader for Windows still not available

    CraigNZ

      hi - over 6 hours after the security bulletin was released there is still no 10.0.2 reader for Windows available - please could Adobe advise when this will be online?

       

      I'm looking at both of these locations and 10.0.1 is the latest...

       

      http://www.adobe.com/support/downloads/new.jsp

       

      ftp://ftp.adobe.com/pub/adobe/reader/win/10.x/

        • 1. Re: 10.0.2 reader for Windows still not available
          PradeepKrSingh Level 1

          According to corresponding security bulletin:

           

          http://www.adobe.com/support/security/bulletins/apsb11-06.html

           

          "...Because Adobe Reader X Protected Mode would prevent an exploit of this kind from executing, we are planning to address this issue in Adobe Reader X for Windows with the next quarterly security update for Adobe Reader, currently scheduled for June 14, 2011... "

           

          10.0.2 version is not released for Reader X Windows. Latest version of Reader X on Windows is 10.0.1 .

          • 2. Re: 10.0.2 reader for Windows still not available
            CraigNZ Level 1

            aah yes that makes perfect sense - I remember seeing something about Protected Mode lowering the need for an update - funny thing is theres an update for the other platforms and builds released today.  Will wait until June.

             

            cheers

            • 3. Re: 10.0.2 reader for Windows still not available
              staples1112

              But how do we patch if we are forced to turn off protected mode becuase it does not work with our custom apps in our environment?  (our app devs are just getting to the modifications now).

               

              Or do we just live unpatched until June?

              • 4. Re: 10.0.2 reader for Windows still not available
                HurricaneAndrew

                The advisory released yesterday is very poorly written.  The first half of the second paragraph specifically recommends users update to 10.0.2 and 9.4.3 to mitigate the vulnerability:

                 

                Adobe recommends users of Adobe Reader X (10.0.1) for Macintosh update to Adobe Reader X (10.0.2). For users of Adobe Reader 9.4.2 for Windows and Macintosh, Adobe has made available the update, Adobe Reader 9.4.3. Adobe recommends users of Adobe Acrobat X (10.0.1) for Windows and Macintosh update to Adobe Acrobat X (10.0.2). Adobe recommends users of Adobe Acrobat 9.4.2 for Windows and Macintosh update to Adobe Acrobat 9.4.3.

                 

                Only at the end of the paragraph does it mention that the update will not be made available until June for 10.0.1.

                 

                Given the issues with Portected mode and some AV software, it would have been far better to release both updates out-of-band so that all users could be protected.

                1 person found this helpful
                • 5. Re: 10.0.2 reader for Windows still not available
                  MichelZ

                  Well, it does state:

                  Adobe recommends users of Adobe Reader X (10.0.1) for Macintosh update to Adobe Reader X (10.0.2).

                   

                  There is nothing mentioned about Windows, so this is probably correct.

                   

                  However, I do have the same problem: What about Readers who need protected mode disabled because there are use cases where it simply does not work..

                  • 6. Re: 10.0.2 reader for Windows still not available
                    Dave Merchant MVP & Adobe Community Professional

                    The advisory makes perfect sense - you're getting mixed up between "Adobe Reader" and "Adobe Acrobat".

                     

                    • Acrobat X users on Windows and Mac should update to 10.0.2 now. The patch is deployed, use "check for updates" to download it.
                    • Adobe Reader X users on Mac should update to 10.0.2 now. The patch is deployed, use "check for updates" to download it or click here.
                    • Adobe Reader X users on Windows should use Protected Mode, which will remove any threat until the quarterly cycle patch in June.
                    • Adobe Acrobat and Adobe Reader 9.4.2 users should update to 9.4.3 now. The patch is deployed, use "check for updates" to download it.

                     

                     

                    If users have disabled Protected Mode for specific reasons, this is done at their own risk. Adobe does not recommend disabling Protected Mode except for closed environments where third-party tools are unsupported and the safety of PDF files opened by Adobe Reader can be warranted by other means.

                     

                     

                    The advisory released yesterday is very poorly written.  The first half of the second paragraph specifically recommends users update to 10.0.2 and 9.4.3 to mitigate the vulnerability:

                     

                    Adobe recommends users of Adobe Reader X (10.0.1) for Macintosh update to Adobe Reader X (10.0.2). For users of Adobe Reader 9.4.2 for Windows and Macintosh, Adobe has made available the update, Adobe Reader 9.4.3. Adobe recommends users of Adobe Acrobat X (10.0.1) for Windows and Macintosh update to Adobe Acrobat X (10.0.2). Adobe recommends users of Adobe Acrobat 9.4.2 for Windows and Macintosh update to Adobe Acrobat 9.4.3.

                     

                    Only at the end of the paragraph does it mention that the update will not be made available until June for 10.0.1.