Preventing PDF documents from opening inside a web browser reduces attack surface. REG file:ĭisable the display of PDF documents in the web browser

This behavior can be reverted to the safer option of prompting the user by importing the following as a. The installer for Adobe Reader and Acrobat configures Internet Explorer to automatically open PDF files without any user interaction. Prevent Internet Explorer from automatically opening PDF documents When JavaScript is disabled, Adobe Reader and Acrobat prompt to re-enable JavaScript when opening a PDF that contains JavaScript. Uncheck the Enable Acrobat JavaScript check box.ĭisabling JavaScript will not resolve the vulnerabilities, it will only disable the vulnerable JavaScript component.

If this workaround is applied to updated versions of the Adobe Reader and Acrobat, it may protect against future vulnerabilities. According to APSB09-06, these vulnerabilities are addressed in versions 9.1.1, 8.1.5, and 7.1.2 of Adobe Reader and Acrobat.ĭisable JavaScript in Adobe Reader and Acrobatĭisabling JavaScript prevents these vulnerabilities from being exploited and reduces attack surface. Users are encouraged to read Adobe Security Bulletin APSB09-06 and update vulnerable versions of Adobe Reader and Acrobat. Adobe has released updates to address this issue.