Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 729565" data-attributes="member: 32260">The sad thing is MS Office popularity among home users. It is like using the chainsaw to slice bread. Even when configuring MS Office to block all active content in documents (macros, OLE, ActiveX, DDE, etc.), the user is still vulnerable, because malware can control Office executables programmatically via &#039;Application Objects&#039; (Word.Application, Excel.Application, PowerPoint.Application). This can be used by malware in many creative ways, because MS Office executables are signed by Microsoft. Also using Adobe Acrobat (desktop application) is not recommended for viewing unsafe documents because of many vulnerabilities.For viewing MS Office documents on Windows 10, I can recommend (free) Word Mobile, Excel Mobile and PowerPoint Mobile. Those are Universal Applications which run fully in App Container ignoring active content in documents.There are also good &amp; free Universal Applications for viewing PDF files: Foxit MobilePDF (viewing but no printing), Adobe Touch ( viewing and printing), Perfect PDF Reader (many functions, epub and mobi support).Also, SumatrPDF (desktop application) can be a good solution because it supports many formats (PDF, DJVU, EPUB, MOBI, etc.), it is blazingly fast, and can be easily restricted via INI file and Exploit Guard. The INI file is accessible from:<a href="https://github.com/sumatrapdfreader/sumatrapdf/blob/master/docs/sumatrapdfrestrict.ini" target="_blank">sumatrapdfreader/sumatrapdf</a>The prerelease version is patched against MuPDF vulnerabilities and can be downloaded from:<a href="https://www.sumatrapdfreader.org/prerelease.html" target="_blank">https://www.sumatrapdfreader.org/prerelease.html</a></blockquote>

[QUOTE="Andy Ful, post: 729565, member: 32260"] The sad thing is MS Office popularity among home users. It is like using the chainsaw to slice bread. Even when configuring MS Office to block all active content in documents (macros, OLE, ActiveX, DDE, etc.), the user is still vulnerable, because malware can control Office executables programmatically via 'Application Objects' (Word.Application, Excel.Application, PowerPoint.Application). This can be used by malware in many creative ways, because MS Office executables are signed by Microsoft. Also using Adobe Acrobat (desktop application) is not recommended for viewing unsafe documents because of many vulnerabilities. For viewing MS Office documents on Windows 10, I can recommend (free) Word Mobile, Excel Mobile and PowerPoint Mobile. Those are Universal Applications which run fully in App Container ignoring active content in documents. There are also good & free Universal Applications for viewing PDF files: Foxit MobilePDF (viewing but no printing), Adobe Touch ( viewing and printing), Perfect PDF Reader (many functions, epub and mobi support). Also, SumatrPDF (desktop application) can be a good solution because it supports many formats (PDF, DJVU, EPUB, MOBI, etc.), it is blazingly fast, and can be easily restricted via INI file and Exploit Guard. The INI file is accessible from: [URL="https://github.com/sumatrapdfreader/sumatrapdf/blob/master/docs/sumatrapdfrestrict.ini"]sumatrapdfreader/sumatrapdf[/URL] The prerelease version is patched against MuPDF vulnerabilities and can be downloaded from: [URL]https://www.sumatrapdfreader.org/prerelease.html[/URL] [/QUOTE]

Verification