Archive for January, 2007

Depressive Developer

Friday, January 5th, 2007

This is just a repost of Mario’s blogpost, translated from german to english:
Since the PDF XSS - or UXSS (Universal XSS) - caused a lot of noise, RSnake (ha.ckers.org) posted a POC which uses defaultfiles of Acrobat Reader. The file ENUtxt.pdf is on nearly all systems with Acrobat.
With the local context of the javascript, Firefox [...]

Posted in javascript, pdf, security, xss | 2 Comments »