[Full-disclosure] Adobe Acrobat Default Behavior Ignores Systems Defaults

[FullDis.20.mandoskippy@xxxxxxxxxxxxxxx]

In Adobe Acrobat 7.0, if there is a link in a PDF file, clicking on the link
opens it in Internet Explorer regardless of the default browser set on the
PC. Although relatively minor, this could be used in a social engineering
attack (albeit a very specifically crafted attack) to get a savvy computer
user running an alternative browser for security reasons, to open a link to
a malicious site in Internet Explorer. Adobe has been notified and has not
responded with any sort of "human" response.  Note: Even Microsoft Word will
open a link in the default browser so this behavior should not be "by
design".

 

MandoSkippy

 

 

 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/