Technology news and Jobs
VIRTUALISATION
PDF links may have a sting in the tail
VIRTUALISATION
PDF links may have a sting in the tail | PDF links may have a sting in the tail |
|
| by Stephen Withers | |
| Thursday, 04 January 2007 | |
A weakness in the Adobe Reader plugin's execution of JavaScript can be combined with a cross site scripting attack with "breathtaking" ease, a security researcher has warned.
Featured Whitepaper
5 Best Practices for Smartphone Support
An exploit would involve persuading a user to click on a specially-formed URL that points to a legitimate PDF file but also contains JavaScript attack code. "Given that it is easy to exploit, I would expect that we will see this method used considerably in the coming days and weeks, until it is resolved," warned Lau. However, the problem seems to be specific to Firefox and can be avoided by changing settings so that PDF files are opened by the Acrobat Reader application rather than the plugin, Lau advised. Other defences include JavaScript filtering at the firewall.{moscomment} |
| < Next story in category | Previous story in the category > |
|---|





Tags




