To Thread - Forum Home

The Mudcat Café TM
https://mudcat.org/thread.cfm?threadid=125835
8 messages

Tech: Disable Javascript in Adobe apps NOW

16 Dec 09 - 07:00 AM (#2789521)
Subject: Tech: Disable Javascript in your Adobe apps NOW
From: Bonnie Shaljean

http://news.cnet.com/8301-1009_3-10415794-83.html

http://blogs.zdnet.com/security/?p=5119&tag=nl.e589

http://www.pcworld.com/businesscenter/article/184704/adobe_reader_zeroday_exploi


Plenty more out there if you google around


16 Dec 09 - 08:08 AM (#2789561)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Girl Friday

You can protect your email list from infiltration by adding "A" to your contact list.


16 Dec 09 - 10:16 AM (#2789634)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Stilly River Sage

Now why would adding "A" to your contact list work, when the problem is that people are opening attachments with this payload? I don't find anything in the articles Bonnie posted that suggest an alphabetical barrier is the answer.

I use PDFs, Acrobat, and Adobe Reader very heavily in my work, and if I disabled Javascript I'd be hobbling myself. I'll just continue to only open email from trusted senders and when it looks like a normal post.

SRS


16 Dec 09 - 10:47 AM (#2789654)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: GUEST,Mr Red

Which versions are affected?

I use Reader 6 somtimes because that was the last one you could download as an installer and install off-line.

I use Writer/Distiller 5 and reader 5 for writing pdfs.

& I don't download big pdf's at home - I use the library PCs because they are better protected (except last month).

But the rule should always be if you don't know who it is from and you didn't expect it, it is of little use. And the unsuspecting friends who disseminate - usually have made themselves obvious in previous e-mails. eg like bulk e-mails revealing everyone's address.


16 Dec 09 - 01:17 PM (#2789737)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Bill D

as the 2nd link says... "use an alternate PDF viewer" until this is sorted out.

Sumatra or PDF Exchange...or even Foxit.


16 Dec 09 - 01:21 PM (#2789740)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Amergin

Don't open emails from sources you don't know....


16 Dec 09 - 02:01 PM (#2789767)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: Jim Dixon

From Adobe's security bulletin:

"Customers using Adobe Reader or Acrobat versions 9.2 or 8.1.7 can utilize the JavaScript Blacklist Framework to prevent this vulnerability. Please refer to the TechNote for more information."

In other words, they have a program you can download and run which temporarily fixes the problem by disabling certain functions of Adobe Acrobat or Reader.


16 Dec 09 - 08:22 PM (#2789999)
Subject: RE: Tech: Disable Javascript in Adobe apps NOW
From: pattyClink

Foxit is a great alternative to Adobe.