Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 980328" data-attributes="member: 32260">No. I tested the new version and it has got some changes that will require updating the DocumentsAntiExploit tool.Thank you, for reporting the issue.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />It seems that the default settings in Adobe Reader DC are now pretty much safe because the AppContainer is enabled by default.The main problem is the way of applying the &quot;Protected View&quot; (disabled on default settings). Adobe insists on showing the option on the yellow bar that allows the user to easily enable all features for the document. There is no way to get rid of it (on the contrary to MS Office macros).[ATTACH=full]265176[/ATTACH]So, even when JavaScript and some other vulnerable features are disabled for all documents,&nbsp; they will be enabled for this particular document. Thank god, that the document is still opened in the AppContainer.The &quot;Protected View&quot; is very strong - so strong that it even blocks printing. It is not a protection for casual users, who will probably use the option &quot;Enable All Features&quot; on the yellow bar to bypass most restrictions.On the other side, it can be good protection for more advanced/cautious users.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /></blockquote>

[QUOTE="Andy Ful, post: 980328, member: 32260"] No. I tested the new version and it has got some changes that will require updating the DocumentsAntiExploit tool. Thank you, for reporting the issue.(y) It seems that the default settings in Adobe Reader DC are now pretty much safe because the AppContainer is enabled by default. The main problem is the way of applying the "Protected View" (disabled on default settings). Adobe insists on showing the option on the yellow bar that allows the user to easily enable all features for [COLOR=rgb(184, 49, 47)][B]the document[/B][/COLOR]. There is no way to get rid of it (on the contrary to MS Office macros). [ATTACH type="full" alt="1647946403644.png"]265176[/ATTACH] So, even when JavaScript and some other vulnerable features are disabled for all documents, they will be enabled for [COLOR=rgb(184, 49, 47)][B]this particular document[/B][/COLOR]. Thank god, that the document is still opened in the AppContainer. The "Protected View" is very strong - so strong that it even blocks printing. It is not a protection for casual users, who will probably use the option "Enable All Features" on the yellow bar to bypass most restrictions. On the other side, it can be good protection for more advanced/cautious users.:unsure: [/QUOTE]

Verification