PDF security risk greater than originally thought

TalkBack 23 of 30:

Next »

« Previous

• Thread View
• Flat View

It's the Adobe Reader

It's the Adobe Reader that is the culprit. One of the least used features (or best kept
secrets) of Acrobat is its very extensive implementation of ECMA JavaScript. This is
entirely different to the JavaScript used by your web browser. Although Adobe have
put in place half-hearted measures to make their JavaScript implementation secure,
it is very easy to write around their security blocks and trawl the user's hard disc for
whatever information you require. Once obtained, that information can be pre-
processed, packaged and sent back to some other URL for whatever purpose. All this
can be done within Acrobat - without the user knowing anything about it.

Posted by: Ian Sedwell   Posted on: 01/07/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• SOA for Dummies 2nd IBM Limited Edition Mini eBook IBM Learn the basics of SOA by following 7 real-life companies as they experience the truly game-changing effects of this important technology initiative. Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now