Adobe Source Code Theft Unlikely to Cause Spike in Exploits
- Robert Lemos for Security Dark Reading October 15th, 2013
- Source: http://www.darkreading.com/vulnerability/adobe-source-code-theft-unlikely-to-caus/240162665
The theft of Adobe's source code from some of its most popular products will likely result in an increase in vulnerabilities found in those products, but security experts are currently debating whether the leaked code will also lead to a greater number of exploits in the coming months.
The answer likely depends on the product, says Dan Guido, CEO for security consultancy Trail of Bits. Adobe Acrobat has a number of anti-exploitation technologies built into the software that will make any attempt to exploit known vulnerabilities much harder, he says. While Acrobat has more than 13 million lines of code -- and likely a passel of undiscovered vulnerabilities -- Adobe's implementation of address space layout randomization (ASLR), a sandbox, and the broker process reduces the attack surface area significantly, he says.
