Cable Forum - Adobe Acrobat Plugin & Javascript

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - Adobe Acrobat Plugin & Javascript (https://www.cableforum.uk/board/showthread.php?t=33605761)

Gareth

04-01-2007 12:04

Adobe Acrobat Plugin & Javascript

Just a heads-up...

http://www.wisec.it/vulns.php?page=9

Quote:

Adobe Acrobat plugin for Mozilla Firefox and IE (acroreader) is able to populate Portable Documents (PDF files) forms by supplying an external set of datas through the FDF, XML, or XFDF fields.

There's a proof of concept of the bug here... http://www.gnucitizen.org/blog/danger-danger-danger/

Disabling javascript, using NoScript extension for FF, or upgrading to Acroboat 8 will mitigate against this.

All times are GMT +1. The time now is 18:10.