Preventing Javascript vulnerability in Adobe Reader

Javascript vulnerability in Adobe Reader

A recent javascript vulnerability has been discovered in Adobe Reader and Adobe Acrobat. This public and confirmed Adobe bug would allow running malicious javascript code just by opening a PDF document. So yes, you computer could be infected by a virus or trojan if you open a PDF file using Adobe Acrobat or Reader.

The bad news are that this malicious javascript code is hard to detect inside a PDF file, so most antivirus software won't be able to prevent the exploit by scanning PDF files. On top of that, Adobe won't be releasing a patch for this bug till January 2010, so the PDF readers would be vulnerable to exploits and so on.

But there are still good news: just disable JavaScript in Adobe Reader to prevent this exploit. That simple trick will keep your computer safe from virus and malware in PDF files.

How to disable javascript in Adobe Reader

Disabling Javascript in Adobe Reader and Adobe Acrobat is very simple. Just select the Edit > Preferences menu, and click the JavaScript option. Then just uncheck the Enable Acrobat Javascript box at the top.

And that's it: unchecking this option as in the image above will prevent the malicious Javascript code from exploiting this recent vulnerability of Adobe Reader.

0 comments

Permalink

Posted by ESV

lphant 4 fake

LPhant 4 is a Fake

From the original post, Lphant 4.0 is a fake, at Triple Clic.

One of the best P2P hybrid clients (ed2k + torrent) till now, lphant, is no longer available at its original webpage. Its latest real version is lphant 3.51.

A company has taken over the webpage, and the new version lphant 4 is not the well known P2P client: it is a fake.

Be careful about installing lphant 4, because we can lose all of our downloads currently in progress. And what is even more important: if we don't keep the lphant 3.51 version installer, we will also lose the option to reinstall lphant again, since lphant version 4 overwrites the former version. In which once was the official webpage of lphant they have erased the previous versions, and they are deleting links to download the older version throughout the main download webpages.

Quote from Wikipedia:

On March 2009 Discordia Ltd. got by force the lphant domain, by using legal methods. In the past, it has appllied the same tactic with success on the open source project Shareaza in 2008.

Discordia Ltd. is a group which attacks P2P clients and file distribution. In the Lphant case, it got the domain but didn't got the software, because they want to eliminate the orignal Lphant with this procedure:

Lphant advertising software suggests the user to upgrade to the new version 4. You visit the official website of lphant in the hands of Discord, download and install a program. This program deletes the previous version. This program is a fake, a costume, is not compatible with Torrent or eDonkey. At this point the user discovers he's lost lphant P2P client, and the page to download the previous version (v 3.51) no longer exists.

Lphant developers are deciding to continue its strategy, but is presumed to be limited because some had to sign a legal agreement with Discordia, which handed the page.

Source: Wikipedia-EN

1 comments

Permalink

Posted by Dremin

What is Treble Click?

Treble Click is a blog about useful computer tips and tricks that can boost your productivity. Treble Click aims to unveil the deep secrets of the most used software applications. Programmers, designers and just internet surfers or end users will find something useful at Treble Click. How to speed up your workflow? How to correct that annoying technical bug? You'll find your answers here.

Treble Click is also a place for designers. It's a source of inspiration where you will find useful ideas. And it's also a source of technical knowledge, that will help you to extract the maximum out of your traditional design software.

Internet is full of knowledge - but useful resources are difficult to find. Treble Click will feature only a selection of the best resources out there, analyzing why they could be worth your time.

Do you think you are a technology expert? Treble Click will explain interesting facts about computers, Internet and technology, that will keep surprising you.

Welcome to Treble Click! - going a step further in mastering Internet, computers, software and technology in general.

1 comments

Permalink

Posted by ESV