On 2014-08-30 07:23, jdd wrote:
Le 29/08/2014 22:43, Carlos E. R. a écrit :
«has security issues»
security issue in pdf means the pdf itself have to be forged?
No, there are many other things. For instance, a PDF can start an external program... Typically native Linux pdf readers will not do such things, mostly because they don't include javascript support. But certainly adobe acrobat does support those things, and foxit I think it does, too. Of course, the exploit to run a command, I read, used "cmd.exe" to run another program, and obviously, that one does not exist in Linux. There are millions of links regarding security in pdf, so not being an expert, it is difficult for me to find the relevant entries. Thus if foxit for Linux had some javascript support, I would be very worried to use in Linux now. And who knows what more...
may be it could be used with the new container chroot similar (I forget the name but its announced recently)?
I use acrobat with apparmour. And I do it with fingers crossed. It is unmaintained... -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)