Adobe PDF Javascript

[gbugbear at gmail.com (Tim Mugherini)]

Hello All,

I know EP 180 hasn't been released on audio yet (so I have not
listened) but I noted Larry's show note on my SANS mailing list post
regarding disabling javascript in Adobe Acrobat/Reader. While you can
disable javascript via .reg or adm it will still warn the user when
opening a .pdf with javascript in it and give them the option to
re-enable js. What I did not know until today is Adobe implemented the
JavaScript Blacklist Framework back in October with their latest and
greatest versions of Reader/Acrobat 8 & 9.

This is useful for blocking specific attacks (like the current 0 day)
via .reg or adm. No menu option exists from what I can find. More info
can be found here

http://kb2.adobe.com/cps/532/cpsid_53237.html

http://kb2.adobe.com/cps/504/cpsid_50431.html

Still think someone need to take one of those Clue By Four's and smack
Adobe with it.

Happy Holidays!

Tim (bugbear)