View Full Version : PDF - exploits - alternative Reader
nOInfectIOn
2009-02-28, 11:53
Hi @all
http://isc.sans.org/diary.html?storyid=5926 (..."the new adobe PDF vulnerability can be exploited without the use of JavaScript"... !)
Alternatives? Yes! : http://www.foxitsoftware.com/announcements/2009226SxiZ.html
Freeware? Yes! : http://www.foxitsoftware.com/downloads/
Sincerely :)
(!the PRO-version is not for free, but the "normal" reader yes!)
nOInfectIOn
2009-03-02, 19:53
...Wanted to "push" this thread, because this is a real problem:
- http://secunia.com/blog/44/
- http://www.heise.de/security/Adobe-stopft-Flash-Luecke-PDF-Loch-weiterhin-offen-2-Update--/news/meldung/133493
nOInfectIOn
2009-03-09, 18:26
Okay: http://forums.spybot.info/showpost.php?p=296035&postcount=66
BUT: they fixed it - very quick!
"Building the Most Secure PDF Reader" - yeah!
Smaller, faster, safer and for free ! ;)
Hi there,
FYI, people can also follow alerts in this forum: General Security Alerts (http://forums.spybot.info/forumdisplay.php?f=28)
Cheers. :)
nOInfectIOn
2009-03-09, 23:20
:D: without being a obsessional smart alec - this is exactly the/ my link ...
ahh, "FYI" = general information = ok, checked :)
Said Bakr
2009-03-14, 21:17
Hi,
I think that FoxIt pdf reader is not a proper replacement for Adobe Acrobat Reader, because of its limited integration with the web browser. Acrobat reader allows you to start previewing pdf pages instantly, you don't have to wait till the whole file to be downloaded. This feature is not available with FoxIt and also it seems to have no any integration with the web browser because the pdf files is invoked to download as any ordinary file such as zip files or exe.
Hi,
I think that FoxIt pdf reader is not a proper replacement for Adobe Acrobat Reader, because of its limited integration with the web browser. Acrobat reader allows you to start previewing pdf pages instantly, you don't have to wait till the whole file to be downloaded. This feature is not available with FoxIt and also it seems to have no any integration with the web browser because the pdf files is invoked to download as any ordinary file such as zip files or exe.
Actually Foxit Reader does have browser integration through a plugin - for Firefox at least. You can download the plugin from the 'Check for updates' menu option.
It is also worth mentioning that the free Foxit Reader adds an ad banner, which advertises other Foxit products in the toolbar at the top left of the application, although it is not that noticeable and is not included in the browser plugin (which most people will use 99% of the time).
nOInfectIOn
2009-03-16, 19:54
Hi @all - thx for feedback :)
Well, I think too, that there is no big browser-integration-problem.
But: Adobe Reader is not bad - normally I would like using it - bad are the people expoiting useful freeware!
Adobe Reader is pretty bloated - you can 'debloat' the program using various tools, but the best alternative IMO is to use a different PDF reader. Foxit reader has the right balance: useful features while also being pretty light on system resources.
Going right over to the other side of the spectrum, Sumatra PDF (http://blog.kowalczyk.info/software/sumatrapdf/index.html) viewer is one of the smallest PDF viewers, that can also be run off a thumb-drive. However, you do lose functionality such as the previously mentioned - browser integration. Nonetheless, I use Sumatra for viewing PDFs on systems that don't have a PDF viewer installed. :bigthumb:
Sumatra's logo also seems to be inspired by the recently hyped about comic book series - Watchmen ;):
http://img145.imageshack.us/img145/7121/sumatra.jpg
nOInfectIOn
2009-03-20, 08:34
Foxit reader has the right balance: useful features while also being pretty light on system resources. :bigthumb:
Sincerely
News! (http://news.softpedia.com/news/Exploit-for-Foxit-Reader-Flaw-Released-106739.shtml) :devil:
Update
In-browser PDF viewing support is available for Chrome now:
http://img5.imageshack.us/img5/1863/chromepdf.jpg
nOInfectIOn
2009-05-09, 11:58
For german speaking readers:
http://www.spiegel.de/netzwelt/web/0,1518,623075,00.html
(theme: it must not always be adobe)
nOInfectIOn
2009-06-23, 14:52
oops, they did it again...
UPDATE-ALERT for foxitsoftware:
- http://www.foxitsoftware.com/announcements/20096193312.html
- http://www.foxitsoftware.com/downloads/
I think that FoxIt pdf reader is not a proper replacement for Adobe Acrobat Reader, because of its limited integration with the web browser.
That's a feature in my book :)
First thing I do when installing reader is try to disable reading in the browser, which just slows the browser down...rather keep those in separate processes. Going to check out sumatra.
PDF-XChange Viewer (http://www.chip.de/downloads/PDF-XChange-Viewer_29539244.html) :banana: