Windows 10 default PDF reader put users at risk

[Kevin Lancaster]

Windows 10 default PDF reader put users at risk

A flaw in the Windows PDF library left users at risk to a remote code execution exploit.

 

[LazyLion]

Windows 10 puts users at risk

Gotcha.

 

[Skerminkel]

So, Win10 prefers you use a browser to read PDFs? Why?

 

[DA-LION-619]

Edge runs in a sandbox I think

 

[sajunky]

Edge runs in a sandbox I think

I think code is executed in Windows Explorer while passing the link to Edge.

In general: If PDF standard had no provision to run executable code it would be no threat.
I think any support for active code in PDF, picture files, Emails, etc. should be removed from application software and Windows Explorer. Sumatra has such option. Windows should follow, problem solved.

 

[backstreetboy]

Gotcha.

The free upgrade time period has stopped and you're not bugged anymore to update. Please do us all a favor and do the same.

So, Win10 prefers you use a browser to read PDFs? Why?

Why not? Apart from SARS and sometimes a weirdly saved or exported pdf everything works on a 3rd party pdf reader aka Chrome, Firefox, Edge etc. Prefer it to the bloated Adobe Reader DC.

 

[LazyLion]

The free upgrade time period has stopped and you're not bugged anymore to update. Please do us all a favor and do the same.

I haven't been bugging people to upgrade! :erm:

 

[Skerminkel]

Why not? Apart from SARS and sometimes a weirdly saved or exported pdf everything works on a 3rd party pdf reader aka Chrome, Firefox, Edge etc. Prefer it to the bloated Adobe Reader DC.

The browsers just use an add on, they do not display it themselves. I prefer Nitro Reader over DC, but don't need a browser for that.