There are ways to circumvent most software, but less opportunities for SumatraPDF to be affected.ĪFAIK the last time SumatraPDF was listed on the exploit database was Sumatra 2.1.1/Mupdf 1.0 (and was fixed soon after that) there are a few known MuPDF exploits on Linux and some file format exploits that may cause cross platform problems, however using the latest pre-release should reduce the likelihood of exposed vectors One reason I support SumatraPDF is that I DO use Acrobat Reader/Editor for commercial use (they can afford to insure me against exploits :-) but for private use I want a simple lightweight Reader product with minimal or NO hidden exploitable functions (use the latest pre-release to avoid JPG issues). 2010 proven to include in the wild, obfuscated JavaScript inside) Comments that can carry VBscript and more recently AutomaticActions (lets wait and see how many additional exploits appear beyond the initial POCs) opens up abuse of applications.
"As there is more and more malware that exploit Acrobat we prefer to use Sumatra"Īdding ANY programmable actions such as JavaScript (so many exploits its depreciating), Flash (so many exploits its depreciating), XFA forms (management using PDFs. See the comment bigretromike makes above for using SumatraPDF in the first place.
0 kommentar(er)
