full-disclosure - Adobe Acrobat Default Behavior Ignores Systems Defaults

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

From: FullDis.20.mandoskippy at spamgourmet.com (FullDis.20.mandoskippy@...mgourmet.com)
Subject: Adobe Acrobat Default Behavior Ignores Systems
	Defaults

In Adobe Acrobat 7.0, if there is a link in a PDF file, clicking on the link
opens it in Internet Explorer regardless of the default browser set on the
PC. Although relatively minor, this could be used in a social engineering
attack (albeit a very specifically crafted attack) to get a savvy computer
user running an alternative browser for security reasons, to open a link to
a malicious site in Internet Explorer. Adobe has been notified and has not
responded with any sort of "human" response.  Note: Even Microsoft Word will
open a link in the default browser so this behavior should not be "by
design".

MandoSkippy

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050322/1f79d484/attachment.html