If you read the PDF spec from the late 90's, it is Stephen King novel-scary... container format, multiple encodings, encryption, embedded binaries, embedded JavaScript and more.
50 CVEs in 50 Days: Fuzzing Adobe Reader
11–20 of 173 posts
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#12Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#13Do people still use Adobe reader nowadays? Last time that I tried it in my school's library it took half a minute to load and render my document, and after that the whole UI was unresponsive. I had a much better experience with Sumatra on windows and Zathura on Linux where my documents open almost instantly.
.. tried Zathura on LUbuntu just now for the first time ; appears to be a VIM for documents viewing or something.. no interest in Zathura here!
Zathura does have some vim keybinds but other than that I can't see any similarities.
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#14Do people still use Adobe reader nowadays? Last time that I tried it in my school's library it took half a minute to load and render my document, and after that the whole UI was unresponsive. I had a much better experience with Sumatra on windows and Zathura on Linux where my documents open almost instantly.
.. tried Zathura on LUbuntu just now for the first time ; appears to be a VIM for documents viewing or something.. no interest in Zathura here!
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#15Do people still use Adobe reader nowadays? Last time that I tried it in my school's library it took half a minute to load and render my document, and after that the whole UI was unresponsive. I had a much better experience with Sumatra on windows and Zathura on Linux where my documents open almost instantly.
[1] https://bugs.freedesktop.org/show_bug.cgi?id=17913
[2] https://gitlab.freedesktop.org/poppler/poppler/issues/463
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#16If you read the PDF spec from the late 90's, it is Stephen King novel-scary... container format, multiple encodings, encryption, embedded binaries, embedded JavaScript and more.
I’m seriously close to banning acrobat the program for my employees, just haven’t found a rock solid alternative that I can trust to not implement the same dumb parts of the spec.
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#17Do people still use Adobe reader nowadays? Last time that I tried it in my school's library it took half a minute to load and render my document, and after that the whole UI was unresponsive. I had a much better experience with Sumatra on windows and Zathura on Linux where my documents open almost instantly.
Libpoppler has poor support for PDF Forms (especially Unicode[1][2]), embedded animation and 3D extensions. In my opinion these areas are very important in real world document exchange to be ignored (as it is a case for PDF FOSS tools). [1] https://bugs.freedesktop.org/show_bug.cgi?id=17913 [2] https://gitlab.freedesktop.org/poppler/poppler/issues/463
Re: 50 CVEs in 50 Days: Fuzzing Adobe Reader
#18If you read the PDF spec from the late 90's, it is Stephen King novel-scary... container format, multiple encodings, encryption, embedded binaries, embedded JavaScript and more.
I don’t know if this is true, but I’ve been told that the pdf spec at one point did/does contain some MS DOS emulation. I’m seriously close to banning acrobat the program for my employees, just haven’t found a rock solid alternative that I can trust to not implement the same dumb parts of the spec.