A Firefox PDF plugin XSS vulnerability

Posted Jan 5, 2007 14:03 UTC (Fri) by jschrod (subscriber, #1646)
In reply to: A Firefox PDF plugin XSS vulnerability by pr1268
Parent article: A Firefox PDF plugin XSS vulnerability

Acroread has the ability to add comments, e.g., during review cycles. (One needs to have Acrobat for creation of such PDF documents, though.)

I have documents that I can only print in acroread; [xk]pdf just happen to do nothing, without any error message.

For some documents, acroread is much faster when one changes pages. One pays with the very long startup time, though.

Selecting texts (copy & paste) works better (that means: UI is more intuitive, action is more often successful) in acroread.

OTOH, I use xpdf a lot more than acroread due to its fast startup time. I use it also more often than kpdf since its desktop real estate need is smaller. I would never use any of these tools as browser plugin, though -- I want to have such documents in their own top-level windows.

Joachim

A Firefox PDF plugin XSS vulnerability

Posted Jan 10, 2007 3:02 UTC (Wed) by droundy (subscriber, #4559) [Link]

Are you aware that you can configure kpdf to show nothing but the document? It's hard to beat that, in terms of screen real estate. This is what switched me from gv over to kpdf (that and kpdf is the first pdf viewer to obtain a decent "watch file" capability).