Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've heard of attacks using PDF files on Windows with Adobe Acrobat and Foxit Reader.

Is Linux vulnerable to these attacks when using the default PDF viewers in KDE or Gnome or even xpdf? What is a good PDF scanner to determine if a PDF file is evil?

share|improve this question
add comment

2 Answers 2

Linux generally uses poppler or xpdf to parse PDF files, which do not have the same vulnerabilities. Obviously, Acrobat Reader for Linux is likely to have at least some of the same vulnerabilities as its Windows and OS X counterparts.

share|improve this answer
3  
On the other hand, it's not unlikely that poppler and xpdf have vulnerabilities of their own! –  Phoshi May 12 '11 at 10:30
    
...and indeed they did have vulnerabilities of their own! Poppler, btw, is a 'fork' of XPDF, which initiative was partially motivated by the fact that XPDF vulnerability fixes (at times) came forward rather slow.... –  Kurt Pfeifle May 12 '11 at 16:37
    
Also, there have been discovered 'vulnerabilities' in the PDF spec itself, so that any viewer which implemented all the spec and all the recommendation bug-free would be 'vulernable'. –  Kurt Pfeifle May 12 '11 at 16:38
add comment

I don`s see how a pdf reader can obtain super user privileges. Unless you run it with root. Furthermore I think foxit has some kind of protection against attacks of those kind.

share|improve this answer
    
You do not need super user privileges in order to cause damage to the user's data. And you don't seem to have heard about 'privilege escalation', or have you? –  Kurt Pfeifle May 12 '11 at 16:40
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.