Author Topic: Vulnerabilities in several PDF applications  (Read 11680 times)

0 Members and 1 Guest are viewing this topic.

Alan Baxter

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #15 on: October 20, 2009, 07:27:25 PM »

If I recall correctly, YoKenny also keeps himself safe by keeping IE8 in Vista fully patched.  I do the same in Firefox and also use the NoScript extension to block all pdf files.  Until Foxit fixes it, I've disabled the Foxit Reader plugin for Firefox.

I don't use Firefox nor Vista and use Windows 7 as I like its additional features.

Protected Mode in IE7/IE8 requires UAC be fully enabled in addition to the setting in Internet Explorer being enabled.
Since UAC is typically disabled by Windows Vista/Windows 7 users, that's an important point to consider.

Switch UAC to the quiet mode
http://www.tweak-uac.com/what-is-tweak-uac

My apologies for misremembering your OS.  I think we all know by now that you don't use Firefox. :)

I've heard that IE8 does a better job of protecting the user than IE7.  Would you recommend that people use IE8 instead of IE7?  I usually do.

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #16 on: October 20, 2009, 07:44:28 PM »
Hi Omid Farhang,

Quote
Thanks for showing Foxit fans they are not secure too!!

How many vulnerabilities the Firefox Plug-in Foxit Reader has in common with Adobe's reader?
So Foxit ReaderFirefox  plug-in is also vulnerable, and no patch in sight yet....
http://seclists.org/fulldisclosure/2009/Oct/198
So download first than read.....but what about new (malicious) PDF-files.
Why did not Firefox put the plug-in on the block list?

polonus
That's talking about Foxit reader version 3.1.1.0928  not 3.1.2.1013

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #17 on: October 20, 2009, 07:51:01 PM »

My apologies for misremembering your OS.  I think we all know by now that you don't use Firefox. :)

I've heard that IE8 does a better job of protecting the user than IE7.  Would you recommend that people use IE8 instead of IE7?  I usually do.
No appologies necessary.

There are many reasons to use IE8:
Increased performance
http://www.microsoft.com/windows/internet-explorer/features/faster.aspx
Stay Safer Online
http://www.microsoft.com/windows/internet-explorer/features/safer.aspx
Enhanced tabbed browsing
http://www.microsoft.com/windows/internet-explorer/features/easier.aspx

Offline George Yves

  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 4095
  • Help you I can
« Last Edit: October 20, 2009, 09:42:09 PM by George Yves »
May the FOSS be with you!

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #19 on: October 20, 2009, 10:07:02 PM »
Do people that use Firefox end up looking like your avatar?

Using a browser is a user's choice and thankfully there is a choice.

Offline George Yves

  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 4095
  • Help you I can
Re: Vulnerabilities in several PDF applications
« Reply #20 on: October 20, 2009, 10:26:50 PM »
Do people that use Firefox end up looking like your avatar?


Quote
Using a browser is a user's choice and thankfully there is a choice.
"Choice consists of the mental process of thinking involved with the process of judging the merits of multiple options and selecting one of them for action."
(From Wikipedia, the free encyclopedia).

May the FOSS be with you!

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #21 on: October 20, 2009, 10:45:47 PM »
Your last post incuded a link detected by Malwarebytes IP protection
Code: [Select]
http://smiles.kolobok.us/big_standart/negative.gifhttp://hosts-file.net/default.asp?s=98.124.198.1

Offline Omid Farhang

  • Frontend Developer
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1660
  • I wish I could write longer personal text!!
    • Homepage
Re: Vulnerabilities in several PDF applications
« Reply #22 on: October 20, 2009, 11:04:52 PM »
Do people that use Firefox end up looking like your avatar?


friend, I offer you to use smilies in this page instead of Kolobok, Malwarebytes has a negative opinion about it (I think for no good reason)
http://forum.qip.ru/misc.php?do=showsmilies
Twitter: OmidFarhangEn - OS: Manjaro KDE

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #23 on: October 21, 2009, 12:29:39 AM »
friend, I offer you to use smilies in this page instead of Kolobok, Malwarebytes has a negative opinion about it (I think for no good reason)
http://forum.qip.ru/misc.php?do=showsmilies
You are confusing smiles with avatars.

Offline Omid Farhang

  • Frontend Developer
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1660
  • I wish I could write longer personal text!!
    • Homepage
Re: Vulnerabilities in several PDF applications
« Reply #24 on: October 21, 2009, 12:35:25 AM »
friend, I offer you to use smilies in this page instead of Kolobok, Malwarebytes has a negative opinion about it (I think for no good reason)
http://forum.qip.ru/misc.php?do=showsmilies
You are confusing smiles with avatars.
No, I'm not!

in his post he used a smiley from this URL: hXXp://smiles.kolobok.us/big_standart/negative.gif which MBAM blocked and you report with another link. I attached that smily to this post.

and the link I posted in reply are list of Smilies in QiP messenger (the popular messenger in Russia).
Twitter: OmidFarhangEn - OS: Manjaro KDE

YoKenny

  • Guest
Re: Vulnerabilities in several PDF applications
« Reply #25 on: October 21, 2009, 12:43:39 AM »

Offline Omid Farhang

  • Frontend Developer
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1660
  • I wish I could write longer personal text!!
    • Homepage
Re: Vulnerabilities in several PDF applications
« Reply #26 on: October 21, 2009, 12:50:26 AM »
I was refering to the avatar not the smilies:
http://forum.avast.com/index.php?action=dlattach;attach=29744;type=avatar

oops! that's funny, in my side, MBAM blocked the smily, not his avatar, that avatar is stored in avast! forum, what's wrong with that?
check that post again, YoKenny!
Twitter: OmidFarhangEn - OS: Manjaro KDE

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48585
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Vulnerabilities in several PDF applications
« Reply #27 on: October 21, 2009, 03:39:13 PM »
Please, take off the gloves and shake hands. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline George Yves

  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 4095
  • Help you I can
Re: Vulnerabilities in several PDF applications
« Reply #28 on: October 21, 2009, 05:22:22 PM »
Please, take off the gloves and shake hands. :)
With great pleasure!

As for my avatar, I chose Master Yoda, a Jedi teacher, because of three reasons:

1) We are both teachers.
2) He usually wished "May the Force be with you!" and I wish "May the FOSS be with you!".
3) I like "Star Wars".
« Last Edit: October 21, 2009, 07:41:20 PM by George Yves »
May the FOSS be with you!

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Vulnerabilities in several PDF applications
« Reply #29 on: October 21, 2009, 07:18:25 PM »
Please, take off the gloves and shake hands. :)

right post at the right time.

nmb