News for hackers. Stuff that matters.

A comment on Converting untrusted PDFs into trusted ones: The Qubes Way (2013). Parent comment

Re:Converting untrusted PDFs into trusted ones: The Qubes Wa... by machinestops on Thursday December 12, 2024 @05:57PM (#42404276)
PDFs support JavaScript. Here's Adobe's guide on how to add JS to your PDFs: https://helpx.adobe.com/uk/acrobat/using/applying-actions-sc...
[ Parent | on HN ]
Re:Converting untrusted PDFs into trusted ones: The Qubes Wa... by Gigachad on Thursday December 12, 2024 @06:56PM (#42404667)
It might be in the PDF spec, but most viewers won't run JS.
[ Parent | on HN ]
Re:Converting untrusted PDFs into trusted ones: The Qubes Wa... by SideQuark on Friday December 13, 2024 @02:04AM (#42406516)
The most widely ones run JS. And the majority of pdf exploits are not js, but a wide mix over all the things a pdf reader supports.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Acrobat

[ Parent | on HN ]