TairikuOkami

Level 18
Content Creator
Verified
Joined
May 13, 2017
Messages
896
OS
Windows 10
Antivirus
Default-Deny
#23
PDF Reader with the least features is most likely the least exploitable, granted it is being updated.
Like opening PDF via WPS Office, there is literally nothing you can do, not even a right click menu.
But I still prefer PDF-XChange Viewer, because of the additional features it offers.
 

Attachments

Evjl's Rain

Level 38
Content Creator
AV-Tester
Verified
Joined
Apr 18, 2016
Messages
2,766
OS
Windows 8.1
Antivirus
Avast
#24
SumatraPDF has no javascript or any scripting support so it can avoid exploit in some extends, unlike foxit and adobe

Opening pdf in browser (edge and chrome's engines) is another good idea but the responsiveness is very bad especially for textbooks or hundreds of megabyte files
it can be fine for some people mostly open small, simple pdfs

sumatra is the most responsive pdf reader I have used but no other functions. Search-in-pdf is also the fastest, compared to foxit, adobe or browsers

for mobile, I find WPS office (v10.2, last version with adfree) is the fastest pdf reader
 

Andy Ful

Level 32
Content Creator
Verified
Joined
Dec 23, 2014
Messages
2,123
OS
Windows 10
Antivirus
Microsoft
#30
The safest PDF viewers are those which can run in the strong sandbox (Application Guard, AppContainer, Sandboxie, Chrome, etc.) and do not allow active content (JavaScript, Flash, etc.). Also, the PDF reader which can open documents outside (or isolated from) the browser is less vulnerable to losing sensitive information about browsing sessions.

Examples:
  • (block active content, AppContainer, outside web browser): Adobe Reader Touch, Foxit MobilePDF;
  • (block active content, AppContainer, isolated from web browser): Edge with Application Guard;
  • (block active content, AppContainer, inside web browser): Edge ;
  • (block active content): Kingsoft WPS Office, SumatraPDF, STDU Viewer.
SumatrPDF can also apply the light sandbox (via .ini file): block Internet access, block disc access, block Registry access, block link protocols, block opening the embedded files by external applications.
 
Last edited:

Brie

Level 5
Joined
Jan 1, 2018
Messages
206
OS
Windows 10
Antivirus
Bitdefender
#35
(block active content): SumatraPDF,
SumatrPDF can also apply the light sandbox (via .ini file): block Internet access, block disc access, block Registry access, block link protocols, block opening the embedded files by external applications.
how do you do this?
 

Lockdown

From AppGuard
Developer
Verified
Joined
Oct 24, 2016
Messages
4,186
#38
On the forums I've only known a single person who was a voracious PDF downloader and reader.

Fretting over the security of PDF readers is needlessly excessive.

The most efficient, and arguably the most effective, things that one can do is simply to not use Adobe Reader or Acrobat, plus learn how to spot malicious PDF.