[Full-disclosure] Adobe Acrobat Default Behavior Ignores Systems Defaults

[FullDis.20.mandoskippy at spamgourmet.com]

In Adobe Acrobat 7.0, if there is a link in a PDF file, clicking on the link
opens it in Internet Explorer regardless of the default browser set on the
PC. Although relatively minor, this could be used in a social engineering
attack (albeit a very specifically crafted attack) to get a savvy computer
user running an alternative browser for security reasons, to open a link to
a malicious site in Internet Explorer. Adobe has been notified and has not
responded with any sort of "human" response.  Note: Even Microsoft Word will
open a link in the default browser so this behavior should not be "by
design".

 

MandoSkippy

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050322/1f79d484/attachment.html