News for hackers. Stuff that matters.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by mfer on Thursday May 14, 2020 @01:21PM (#23182392)
Preview has issues with PDFs with form fields right now. It causes a bunch of people to need to install Acrobat for that use case. :(
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dathinab on Thursday May 14, 2020 @03:58PM (#23184579)
There is quite a bunch of "PDF" features around forms which basically only work with Adobe PDF and maybe one or two other ones. But good luck if non of them are available for you.

Worse many "office" people which create PDF's with form fields use Adobe tools, so they never see that what they hand out to thousends of students isn't working with >90% of PDF viewers....

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by rspeed on Friday May 15, 2020 @12:31AM (#23188914)
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by m463 on Thursday May 14, 2020 @11:35PM (#23188596)
This sounds like a page in a playbook for a company that wants to maintain their monopoly.

- it is plausibly open

- there are enough edge cases that your tool is the only one that does it reliably.

This is similar to doc format - apple tools or openoffice can open it, but screw it up for everyone if they try to write it.

There is a wonderful rant about another adobe file format .PSD in this code here:

https://github.com/gco/xee/blob/master/XeePhotoshopLoader.m

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dhimes on Friday May 15, 2020 @05:19PM (#23197557)
That's beautiful. However, if I weren't an only child in two weeks I would take exception to that "old" bit describing the Uncle.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jmondi on Thursday May 14, 2020 @01:23PM (#23182423)
Installed Acrobat a few weeks ago for this use case specifically. I feel like Preview used to be a lot better at editing fields, recently it has been a real pain.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by kevin_thibedeau on Thursday May 14, 2020 @02:40PM (#23183576)
PDF has two types of forms: native and JS driven. I'd bet that the problems are with the JS. I'd also be willing to bet that Adobe makes Acrobat author forms in a way that intentionally breaks third party readers.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by hunter2_ on Thursday May 14, 2020 @03:43PM (#23184391)
<airquotes>P</airquotes>DF
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by ggregoire on Thursday May 14, 2020 @01:33PM (#23182591)
Are there not any alternatives to Adobe Acrobat Reader on macOS for editing fields and other use cases listed in the other comments?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by leejoramo on Thursday May 14, 2020 @01:44PM (#23182800)
Apple's Preview does a pretty good job with generic pdf forms. Unfortunately, Adobe has created multiple types of pdf forms using different technologies and very complex specs. Apple does not support all of these. (You can also find many cases of PDF forms using Adobe tools that do not round trip between platforms).

PDF Export does a good job of filing in the gaps.

https://pdfexpert.com

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by rspeed on Friday May 15, 2020 @12:49AM (#23188997)
Not just complex specs. Some of them are proprietary.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by gav on Thursday May 14, 2020 @02:07PM (#23183131)
There's some non-free options:

Editing/Form Fill/etc: Nitro[1]

Signing: Nitro[1], HelloSign[2], airSlate[3], Smallpdf[4] (limited functionality)

[1] https://www.gonitro.com

[2] https://www.hellosign.com

[3] https://www.airslate.com

[4] https://smallpdf.com

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by behnamoh on Thursday May 14, 2020 @01:36PM (#23182664)
OTOH, Preview renders PDFs way better than Adobe Reader does. Tweaking the settings in AR didn't help either.

I only wish Preview would do two things:

- open files in "maximized" view.

- when opening a file, Left/Right arrow keys don't let you navigate the pages. Instead, they move the current page a few pixels left/right! (they work like horizontal scrollers)

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by r00fus on Thursday May 14, 2020 @02:08PM (#23183143)
Luckily other PDF editors do well with form fields and don't bundle a JS VM into their runtime.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jiofih on Thursday May 14, 2020 @02:05PM (#23183107)
That’s interesting. The iPad version works extremely well for editing.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by steve_taylor on Friday May 15, 2020 @12:08AM (#23188802)
Why would anyone in their right mind create a PDF form?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jusssi on Friday May 15, 2020 @03:11AM (#23189725)
They are actually quite handy when the only allowed method of submission is via snail mail or fax. Much better than the alternative of printing an empty form and filling it all in by hand.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by BolexNOLA on Sunday May 17, 2020 @10:07PM (#23217458)
Man I don’t know what industry you’re in but I get 3-4 PDF’s a week.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pfortuny on Thursday May 14, 2020 @01:44PM (#23182792)
What about Skim? It is the one I use.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by behnamoh on Thursday May 14, 2020 @03:14PM (#23184029)
It's good, but creates additional files for your annotations and comments - which btw, cannot be read in other software.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pfortuny on Wednesday May 20, 2020 @02:05PM (#23249892)
Yea, that is right.
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by lowwave on Thursday May 14, 2020 @06:24PM (#23186299)
For sure, however it seems like vast majority of use of PDF, (which is to view a printed document as it is) is addressed by Preview.

For stuff like sign a PDF and form are not things normal people need to use.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by techslave on Thursday May 14, 2020 @11:40PM (#23188641)
so the only people doing that are abby normal?
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by crazygringo on Thursday May 14, 2020 @03:03PM (#23183884)
People keep saying this, but the form-filling tools are basically identical to Reader's. I don't get it.

What Preview doesn't support is JavaScript, as far as I can tell, so it can't work with "smart" PDF's, e.g. that will do calculations for you.

Is that what you're referring to? Or I'd love to know any specific issue you've run into with form fields.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dathinab on Thursday May 14, 2020 @04:01PM (#23184624)
The problem is that if the PDF forms where create with an Adobe program even things which should work with generic PDF might not do so because the Adobe program used JS or whatever below the cover.

EDIT: I looked into some of the PDFs again and it seems I had been wrong. Not sure what they use but it doesn't seem to be js.

EDIT EDIT: But I found other forms which where affected see my response below.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by crazygringo on Thursday May 14, 2020 @04:22PM (#23184876)
Is that a real thing?

I've encountered JavaScript-heavy PDF's before, but which were obviously so. (Automatically calculating values for one form field based on another, generating QR codes, etc.)

I've never come across a seemingly "normal" form PDF but which secretly used JavaScript for normal things like form filling, so that normal form-filling tools didn't work. I don't understand why the normal PDF type-in-a-text-box tool wouldn't work.

Have you actually come across this? Can you point to any examples?

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dathinab on Thursday May 14, 2020 @05:46PM (#23185949)
While (like it can be seen in the EDIT) the forms I found where not affected with JS. Other forms from my uni where.

For example I found following:

`/JS (if \(this.getField\("inst1"\).value == "bitte auswählen"\){\r\nthis.getField\("Hinweis"\).display = 2\r\n} else\r\n{\r\nthis.getField\("Hinweis"\).display = 1\r\n}\r\n)$ /S /JavaScript`

This (in the given PDF) causes a "notice" overlapped on top of other form fields to disappear once the first multiple choice field was selected.

So if you try to fill it out without JS some form fields are not visible (but selectable by tab). Luckily it's not included in prints.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by hn_throwaway_99 on Thursday May 14, 2020 @05:41PM (#23185881)
Yes, as another commenter pointed out, Canadian govt citizenship forms, e.g. https://www.canada.ca/en/immigration-refugees-citizenship/se...
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by dathinab on Thursday May 14, 2020 @05:09PM (#23185477)
I have run into this with regard to basic, but "slightly" more advanced features then text fields on forms in my university.

You can be sure that even Adobe won't add JS for forms with plain text fields. ;=)

EDIT: I looked into some of the PDFs again and it seems I had been wrong. Not sure what they use but it doesn't seem to be js.

Sorry about this.

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by abdullahkhalids on Thursday May 14, 2020 @05:00PM (#23185373)
The Canadian govt forms like Visa application forms or Tax forms don't work on any Linux pdf tool that I tested with. The pdf would display empty with a JS error message. This was a few years ago though.

Had to install the linux version of Adobe, which is many years out of date now.