PCM

惡意 PDF 檔案攻破防線 7 招教你保安全（附 Acrobat Reader 關閉 JavaScript 步驟）

PDF 作為可信的文件格式已被攻破，不法分子看中 PDF 容易繞過安全檢測，又可嵌入連結的特點，已成為當前最常見的攻擊手法之一。網絡安全解決方案 Check Point 旗下的 Check Point Research（CPR）調查 ...
GitHub

acrobat-javascript

View able PDFs in HTML allowing cross communication with JS and AcrobatJS for auto filling data and extraction of data in both directions (IE Only, Adobe API Issue) ...
iThome Online

Adobe修補Acrobat/Reader 並增JavaScript白名單功能

因為許多惡意PDF檔案依賴PDF檔案中的JavaScript程式進行攻擊，因此停用Acrobat/Reader的JavaScript功能可以提昇系統安全。 但如果停用JavaScript，Acrobat/Reader將無法執行部分填表、流程等功能，因此Adobe允許使用者把信任的文件加入白名單中，僅在信任的文件中啟用JavaScript功能。
Security Boulevard

Analysis of Adobe Acrobat Reader Javascript Doc.print() Use-After-Free Vulnerability (CVE-2022-34233)

In July 2022, Adobe released a security update for vulnerabilities in Adobe Acrobat and Reader. The update fixed a vulnerability that is identified as CVE-2022-34233 discovered by Zscaler’s ThreatLabz ...
Bitdefender

Researchers Find Several JavaScript Processing Flaws in Word, Adobe Acrobat, Other Apps

Security researchers found 134 vulnerabilities in the way apps such as Adobe Acrobat and Microsoft Word handle JavaScript. Experts developed a tool to help them with the task and called it Cooper, in ...