Thread: Adobe Acrobat Plugin & Javascript
View Single Post
Old 04-01-2007, 12:04   #1
Gareth
cf.mega poster
 
Gareth's Avatar
 
Join Date: Dec 2003
Age: 50
Posts: 7,101
Gareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny stars
Gareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny starsGareth has a pair of shiny stars
Adobe Acrobat Plugin & Javascript
Just a heads-up...

http://www.wisec.it/vulns.php?page=9

Quote:
Adobe Acrobat plugin for Mozilla Firefox and IE (acroreader) is able to populate Portable Documents (PDF files) forms by supplying an external set of datas through the FDF, XML, or XFDF fields.
There's a proof of concept of the bug here... http://www.gnucitizen.org/blog/danger-danger-danger/

Disabling javascript, using NoScript extension for FF, or upgrading to Acroboat 8 will mitigate against this.
Gareth is offline   Reply With Quote