BugTraq
Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous Jan 04 2007 12:46PM
Juha-Matti Laurio (juha-matti laurio netti fi) (1 replies)
Possibly no, but I was just sending this reference to the lists:
http://www.kb.cert.org/vuls/id/815960

"According to public reports, this vulnerability is addressed in Adobe Acrobat Reader 8.0."

Solution:
http://www.adobe.com/products/acrobat/readstep2.html

But it is worth of mentioning that there are no all localized Reader 8 versions available yet.
If the organization (and a home user!) uses localized Reader product you have to disable 'Display PDF in browser' setting as a workaround.

- Juha-Matti

Thierry Zoller <Thierry (at) Zoller (dot) lu [email concealed]> wrote:
> Dear List,
>
> Did anybody mention this does not work in Adobe Acrobat Reader 8 ?
>
> --
> http://secdev.zoller.lu
> Thierry Zoller
> Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7

[ reply ]
RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous Jan 04 2007 01:36PM
Larry Seltzer (Larry larryseltzer com) (1 replies)


 

Privacy Statement
Copyright 2010, SecurityFocus