[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] pdf with tor



ncl

> mtsio:
>> If you to Preferences->Applications->Portable Document Format there
>> is the option 'Preview in Tor Browser' that opens the PDF without
>> opening an external application. What's the problem with that?
>
> Well, Mozilla announced a secadv for pdf.js recently, so there's that.
>
> https://www.mozilla.org/en-US/security/advisories/mfsa2015-69/

Ugh, here comes another:

https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/

This one seems specially nasty in the context of Tor. Notice the following sentence:

> Mozilla has received reports that an exploit based on this vulnerability *has
> been found in the wild*.

The bug report is apparently still embargoed.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk