Comments on: Disabling Javascript on Adobe Acrobat http://praetorianprefect.com/archives/2009/12/disabling-javascript-on-adobe-acrobat/ Information security, a little slower...a little deeper Thu, 17 May 2012 08:33:26 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Praetorian Prefect | Disable Acrobat Reader PDF in the Enterprise http://praetorianprefect.com/archives/2009/12/disabling-javascript-on-adobe-acrobat/comment-page-1/#comment-5704 Praetorian Prefect | Disable Acrobat Reader PDF in the Enterprise Thu, 14 Jan 2010 03:37:49 +0000 http://praetorianprefect.com/?p=2840#comment-5704 <p>[...] have previously posted instructions for users to disable JavaScript, giving them the option to enable it only when necessary. However, [...]</p> [...] have previously posted instructions for users to disable JavaScript, giving them the option to enable it only when necessary. However, [...]

]]> By: Tim http://praetorianprefect.com/archives/2009/12/disabling-javascript-on-adobe-acrobat/comment-page-1/#comment-5358 Tim Fri, 08 Jan 2010 14:36:38 +0000 http://praetorianprefect.com/?p=2840#comment-5358 <p>JCG to date not there is no way to globally disable JavaScript in Adobe Acrobat or Reader permanently. I set my patch mgmt system to "autofix" all agents via the registry key and try to educate the end users of the risks.</p> <p>There is however the Adobe JavaScript Blacklist Framework that was released this past October. More information on using this to mitigate the current 0-Day is here</p> <p>http://kb2.adobe.com/cps/532/cpsid_53237.html</p> <p>I also cover it on my personal b log (warning with a bit of a rant) here: http://securitybraindump.blogspot.com/2009/12/adobes-0-face.html</p> <p>Hope this helps. Its not perfect and its very reactive but I am hoping that Adobe steps up and gives us an alternative (i.e. an option to permanently disable JS)</p> JCG to date not there is no way to globally disable JavaScript in Adobe Acrobat or Reader permanently. I set my patch mgmt system to “autofix” all agents via the registry key and try to educate the end users of the risks.

There is however the Adobe JavaScript Blacklist Framework that was released this past October. More information on using this to mitigate the current 0-Day is here

http://kb2.adobe.com/cps/532/cpsid_53237.html

I also cover it on my personal b log (warning with a bit of a rant) here: http://securitybraindump.blogspot.com/2009/12/adobes-0-face.html

Hope this helps. Its not perfect and its very reactive but I am hoping that Adobe steps up and gives us an alternative (i.e. an option to permanently disable JS)

]]> By: jcg http://praetorianprefect.com/archives/2009/12/disabling-javascript-on-adobe-acrobat/comment-page-1/#comment-5306 jcg Thu, 07 Jan 2010 18:19:26 +0000 http://praetorianprefect.com/?p=2840#comment-5306 <p>is there any way to make disabling javascript "sticky"? i have disabled it in the past, but when i run into a form that needs it turned on, acrobat turns javascript on permanently, not just for the current document.</p> is there any way to make disabling javascript “sticky”? i have disabled it in the past, but when i run into a form that needs it turned on, acrobat turns javascript on permanently, not just for the current document.

]]>