up vote 1 down vote favorite
share [g+] share [fb]

Would it make a difference we if use a product such as SumatraPDF or FoxIt?

link|improve this question
91% accept rate
2  
Although unconfirmed (so I'm not making it an answer) it is down to the Operating System for certain parts, and down to the program for certain other ones. Adobe does a good job of patching bugs that are reported, but if you look at the Mac OS, they still have a PDF bug that affects Preview, Adobe Acrobat and Adobe Reader – Luke Nov 15 '11 at 21:41
1  
To expand a little on this topic without adding an answer: arbitrary executable files are specified and allowed in the PDF spec. Certainly most readers at this point operate on low trust of such features, but it is/may be possible to enable such functionality if desired. – horatio Nov 15 '11 at 22:02
@horatio - How would I know what executable files are allowed to be run when viewing a PDF? Is there a way to determine what executable files are included in the PDF before opening it? – PeanutsMonkey Nov 15 '11 at 22:05
1  
I don't know. Perhaps something like ( cheapimpostor.com/PDFInspector ) which I have never used and make no claims of safety about. – horatio Nov 15 '11 at 22:21
@Linker3000/Tom Wijsman/studiohack - I would appreciate if you could let me know what would have made the question constructive? – PeanutsMonkey Nov 17 '11 at 18:46
feedback

closed as not constructive by Linker3000, Tom Wijsman, studiohack♦ Nov 16 '11 at 17:55

This question is not a good fit to our Q&A format. We expect answers to generally involve facts, references, or specific expertise; this question will likely solicit opinion, debate, arguments, polling, or extended discussion. See the FAQ for guidance on how to improve it.

1 Answer

up vote 2 down vote accepted

It depends entirely on the reader's implementation and the nature of the bug. Like @Luke says above, some bugs are in the underlying OS or other libraries. In those cases, there's a fair chance that other readers will be affected (but no guarantee, they may use a different library call, have their own implementation, sanitize the input better, etc.). Other exploits like buffer overflows are more specific to the program and are much less likely to impact other readers.

link|improve this answer
1  
How am I able to tell what underlying OS libraries or other libraries the reader is using? – PeanutsMonkey Nov 15 '11 at 22:03
1  
@PeanutsMonkey you can't - unless the program's credits/about screen mentions them. – Sathya♦ Nov 16 '11 at 7:54
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.