Adobe Reader Javascript Blacklist Framework
|
|
|
||||||||||||
Description:
The Adobe Reader and Acrobat JavaScript Blacklist Framework provides customers granular control over the execution of specific JavaScript API calls. The purpose of the Framework is to allow Adobe to protect customers against attacks that target a specific JavaScript API call, like the one referenced in Security Advisory APSA09-07.
In the video below, Didier Stevans shows a demo of the framework, where he disables the Util.Printf function. The full blog post is available here.
In the video below, Didier Stevans shows a demo of the framework, where he disables the Util.Printf function. The full blog post is available here.