User Tools

Site Tools


secureadobereader

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

secureadobereader [2013/01/27 21:29] (current)
Line 1: Line 1:
 +====== Secure Adobe Reader ======
 +This is not a silver bullet for Adobe Reader security, but it will prevent the current most popular ways of being exploited. ​ Basically, it will just disable Javascript and Flash within Reader. ​ Personally, I think it's ridiculous that Adobe even added this functionality to PDF's.
 +
 +**NOTE:** Do not do this if the PDF's you need to utilize require this functionality.
 +
 +===== Disabling Javascript can be done in a couple of different ways: either the settings within reader or through the registry. =====
 +  - Go to Edit, Preferences… Then in the left-pane, navigate to JavaScript. The right-side of the window will update to JavaScript preferences. You should uncheck “Enable Acrobat JavaScript.”
 +  - <​file>​reg add "​HKCU\Software\Adobe\Acrobat Reader\#​.#​\JSPrefs"​ /v bEnableJS /t REG_DWORD /d 0 /​f</​file>​
 +      Where #.# is the version of Reader you are using.
 +
 +===== Disabling Flash requires the deleting/​renaming of a couple of files. =====
 +On Microsoft Windows, delete or rename these files:
 +<​file>"​%ProgramFiles%\Adobe\Reader <​version_#>​\Reader\authplay.dll"​
 +"​%ProgramFiles%\Adobe\Reader <​version_#>​\Reader\rt3d.dll"</​file>​
 +
 +For Apple Mac OS X, delete or rename these files:
 +<​file>"/​Applications/​Adobe Reader 9/Adobe Reader.app/​Contents/​Frameworks/​AuthPlayLib.bundle"​
 +"/​Applications/​Adobe Reader 9/Adobe Reader.app/​Contents/​Frameworks/​Adobe3D.framework"</​file>​
 +
 +For GNU/Linux delete or rename these files (locations may vary among distributions):​
 +<​file>"/​opt/​Adobe/​Reader9/​Reader/​intellinux/​lib/​libauthplay.so"​
 +"/​opt/​Adobe/​Reader9/​Reader/​intellinux/​lib/​librt3d.so"</​file>​
 +
 +
 +-- Main.FredPettis - 2010-12-13
  
secureadobereader.txt · Last modified: 2013/01/27 21:29 (external edit)