And if you see a warning like the one above, it might be smart to click the “Do Not Open” button.

To update, click the Help menu, and then Check for Updates Now, or download the latest installer from this link here. If you are using Foxit, please upgrade to this latest version, which is v.

However, I could find no such option in Foxit. Adobe Reader contains an option to disable opening non-PDF attachments with external applications (under Preferences, click Trust Manager, and then uncheck the box at the top of the next window). Unlike previous attacks on PDF readers - which can generally be blocked by selecting the option to disable Javascript in the programs - this attack leverages features built into these readers. According to Stevens, the Foxit fix shipped last week changes the reader so that it now warns users if a PDF document tries to launch an embedded program. Stevens found that when he triggered the feature in Adobe Reader the program throws up a warning that launching code could harm the computer (although he also discovered he could change the content of that warning in Adobe Reader).įoxit, however, displayed no warning at all and executed the action without user approval. Worse, Stevens found that PDF readers from Adobe Systems and Foxit contained a feature that would run those embedded files upon request, in some cases without even warning the user. Last month, researcher Didier Stevens said he’d discovered that he could embed an executable file - such as a malicious program - inside of a PDF file. Also, Apple has pushed out new versions of QuickTime and iTunes that correct nearly two dozen security problems in those programs. Foxit Software has issued an update to make it easier for users to spot PDF files that may contain malicious content.

Quicktime download 7.6.6