Internet Security and Programming

People who use the free Foxit Reader software as an alternative to Adobe for viewing portable document format (PDF) files should take note: Foxit has shipped a new version that plugs a serious security hole in the program. The newest version, available here, brings Foxit to v. 2.3, Build 2923. Not sure which version you’re running? Click “Help,” and “About Foxit.” Researchers at security firm Secunia labeled the vulnerability as “highly critical.” The flaw stems from a problem with the way Foxit handles Javascript. I prefer Foxit over Adobe, and here’s one good example why: The lack of program bloat. Turns out, most Foxit reader users don’t have to worry about this flaw to begin with, because the free Foxit Reader ships without Javascript support by default. Rather, it is available as an add-on that you must manually download and install after installing the base program. By comparison, have [...]

Read more…