PDF Readers, JavaScript and Security

ScanSafe recently called out in its Annual Global Threat Report that malicious PDF files (often opened with PDF reader software) comprised 56 percent of Web-encountered hacker exploits in 1Q09, growing to 80 percent in 4Q09.

 

The security experts believe, "this trend is likely indicative of attackers' preference for PDF exploit, likely due to the increasing availability of vulnerabilities and the continued widespread use and acceptance of PDF files in the workplace."

 

The ScanSafe research follows a McAfee Labs report that predicted Adobe would overtake Microsoft as the primary target for hackers and virus writers in 2010.

 

There is a simple way to avoid these hazards -- do not install JavaScript processing with your PDF reader. You will loose a small amount of functionality, but it may be well worth it.

 

Unfortunately, this is something users cannot do with Adobe Reader. And that means hackers can potentially use the PDF JavaScript vulnerability to gain control of a user's computer - exposing users to system attacks and the transfer of personal information simply by viewing infected PDF files.

 

However, an answer to this troubling PDF security threat has hit the market - the free Nuance PDF Reader, which creates a safer PDF environment for the end user by allowing them to prevent JavaScript installation. This approach adds an additional safety net for IT professionals looking to safeguard their organizations.

 

We encourage you to download the free Nuance PDF Reader and share your experiences with us.

Comments

[Nike Air Max 90]

Hello!!It is my horour to see you blog.Iam agree with you,Ithink friendship is very important,so we must have a lot friend,History repeated proof: friend, health than leadership than performance than IQ, eq, holiday greetings than usual, as an important than. Space than the ground is good, to visit friends, no tickets. If you want to buy a shoes, Please come here Nike Air Max 90
http://www.buynikeairmax90.com
http://www.uggbootstore.org
http://www.uggbootsvv.com

[arizona estate sale]

I needed that especially im a big user of PDF files.

[Hire Developer]

I went through your blog and honestly am impressed with the way you write, along with the expertise you have about the market I would want to see more of your blogs. I work with Franchise India and lately met you at the event also, I was wondering whether you would be keen on becoming a columnist with our website. Would wait for your response.

[White Sox jerseys]

Actions speak louder than words.

[Burberry Outlet]

I work with Franchise India and lately met you at the event also, I was wondering whether you would be keen on becoming a columnist with our website. Would wait for your response.

[id scanner for bars]

Your blog is an eye opener for the PDF users. Security is the prime concern for any user. So for this we should not install java script along with PDF reader which gives hackers access to our computers.Try to use Nuance PDF reader for safer work environment. Thanks for this information.

[Tory Burch Outlet]

I don't understand why Adobe itself doesn't offer a free conversion option, I always find myself looking for free widgets that will help me with conversions for word to PDF and vise versa!

[North Face Outlet]

However, an answer to this troubling PDF security threat has hit the market - the free Nuance PDF Reader, which creates a safer PDF environment for the end user by allowing them to prevent JavaScript installation. This approach adds an additional safety net for IT professionals looking to safeguard their organizations.

[scottsdale periodontist]

Sounds interesting. I would try that.

[thenorthfacejacketssale]

Some argue that it is a way of making ourselves feel better about being served because we know the waiter works hard.

[excel development]

Try these solutions. Open your browser, click the menu button, scroll to Options. Go into Browser Configuration and check "Support JavaScript". Try the website. If it still doesn't work, go back into the same setting, keep Support JavaScript checked and go to "Browser Identification", select Internet Explorer. This can also be known as "Browser Emulation Mode". Now try the website. If it still doesn't work, then you're sunk. But these are the best attempts and they do sometimes work. Under normal circumstances I can't login to by bank, but with these settings mine works.