• iAmTheTot
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    3
    ·
    15 hours ago

    I don’t think it has to do with opening a PDF in Adobe, but okay.

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 hours ago

      Yeah it does. Adobe has a lot of active script support, including java script for example, which can be exploited. If a software can’t interpret those scripts at all and simply displays plain text, that means malware won’t be executed.

      And since Adobe Acrobat / Acrobat Reader are the most common pdf viewers out there, they are a natural target for hackers as well.

      • iAmTheTot
        link
        fedilink
        English
        arrow-up
        2
        ·
        6 hours ago

        Is Acrobat the only pdf reader with active script support? For example, do the common browsers which can also open pdfs not support the same things?

        • viking@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 hours ago

          I genuinely don’t know, I have set my browser to download pdfs by default and only open them with Sumatra. There might be a scripting layer active in the browser as well though, quite possible.

          • iAmTheTot
            link
            fedilink
            English
            arrow-up
            1
            ·
            5 hours ago

            Then would you agree that it doesn’t have to do with Adobe Acrobat, as much at it does active script in PDFs and if the reader executes it?