Friday, November 27, 2009

Microsoft IE - PDF invisibly embedded with your internal disk paths

Security researcher from SecureThoughts.com posted up the privacy bug of the PDF. This bug occurs when using IE to print locally saved webpages as PDF and affects all IE versions including latest IE 8.

Proof of Concept:

Steps to reproduce:
-------------------
1. Pick a .HTM or .HTML or .MHT file on your local computer.
2. Open this file in IE and click Ctrl-P. OR Right-click the file in explorer and select PRINT from context menu.
4. Select any PDF writer as Printer such as Adobe PDF / CutePDF / PrimoPDF /etc.
5. Click Print. When the PDF writer asks for a filename, provide any name.
6. Open the generated pdf in notepad, and search for “file://” without quotes.

Million of PDF found in Google invisibly to this kind of bug.


Reference:

0 comments: