1. #1
    hackerman1 is offline Senior Member
    Join Date
    Dec 2008
    Location
    Sweden
    Posts
    1,525

    Default Security problem with PDFs in Firefox 19 ?

    Hi !

    Are there a security problems with PDFs in Firefox 19 ?

    I know that Firefox (FF) 19 has an internal PDF-viewer, but i always download PDF-documents so i can scan them with my antimalware-programs before opening them,
    and i also already have a very good program for PDFs (PDF-Xchange) with a lot of options for viewing etc. so i dont want to use another viewer.
    I have all "PDF-settings" in Firefox set to "save".

    But today i noticed that when I click on a direct link (URL) to a PDF-document, that FF opened it in a new tab instead of saving it as my settings says it should do.
    Although im not worried about my security this time, as the PDF-document itself is no problem since it was a test report from Matousec...

    A quick look at the configuration in FF, enter "about:config" in a new tab, and typing "pdf" revealed: "pdfjs.disabled;false"
    Switching that to "true" by double-clicking it stops FF from opening PDFs internally.

    Now the BIG question is, does FFs internal PDF-viewer support javascript ?
    And if so, how do you disable javascript ?
    And why is there no setting in the "application-menu" for disabling the internal viewer ???

    Remember, running javascript in a PDF-viewer can be VERY dangerous !
    Last edited by hackerman1; 26th February 2013 at 17:46.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Log in

Log in

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22