Adobe issues official workaround for PDF vulnerability
April 7, 2010 – 7:57 AMFor consumers, open up the Preferences panel and click on “Trust Manager” in the left pane. Clear the check box “Allow opening of non-PDF file attachments with external applications“.
For administrators who wish to accomplish this with a registry setting on Windows, add the following DWORD value to:
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\\Originals
Name: bAllowOpenFile
Type: REG_DWORD
Data: 0
Furthermore, an administrator can grey out the preference to keep end-users from turning this capability on, by adding the following DWORD value to:
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\\Originals
Name: bSecureOpenFile
Type: REG_DWORD
Data: 1
Source:
http://blogs.adobe.com/adobereader/2010/04/didier_stevens_launch_function.html
One Response to “Adobe issues official workaround for PDF vulnerability”
(Javascript being enabled or disabled no longer matters for the latest attacks)
By manunkind on Apr 7, 2010