Full Disclosure mailing list archives
Adobe Acrobat Default Behavior Ignores Systems Defaults
From: FullDis.20.mandoskippy () spamgourmet com
Date: Tue, 22 Mar 2005 15:00:11 -0600
In Adobe Acrobat 7.0, if there is a link in a PDF file, clicking on the link opens it in Internet Explorer regardless of the default browser set on the PC. Although relatively minor, this could be used in a social engineering attack (albeit a very specifically crafted attack) to get a savvy computer user running an alternative browser for security reasons, to open a link to a malicious site in Internet Explorer. Adobe has been notified and has not responded with any sort of "human" response. Note: Even Microsoft Word will open a link in the default browser so this behavior should not be "by design". MandoSkippy
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Adobe Acrobat Default Behavior Ignores Systems Defaults FullDis . 20 . mandoskippy (Mar 22)