[Full-disclosure] Adobe Acrobat Default Behavior Ignores Systems Defaults
FullDis.20.mandoskippy_at_spamgourmet.com
Date: 03/22/05
- Previous message: Marchand, Tom: "[Full-disclosure] RE: [ISN] How To Save The Internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: full-disclosure@lists.grok.org.uk Date: Tue, 22 Mar 2005 15:00:11 -0600
In Adobe Acrobat 7.0, if there is a link in a PDF file, clicking on the link
opens it in Internet Explorer regardless of the default browser set on the
PC. Although relatively minor, this could be used in a social engineering
attack (albeit a very specifically crafted attack) to get a savvy computer
user running an alternative browser for security reasons, to open a link to
a malicious site in Internet Explorer. Adobe has been notified and has not
responded with any sort of "human" response. Note: Even Microsoft Word will
open a link in the default browser so this behavior should not be "by
design".
MandoSkippy
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Previous message: Marchand, Tom: "[Full-disclosure] RE: [ISN] How To Save The Internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
