[tor-talk] pdf with tor

[Cain Ungothep]

ncl

> mtsio:
>> If you to Preferences->Applications->Portable Document Format there
>> is the option 'Preview in Tor Browser' that opens the PDF without
>> opening an external application. What's the problem with that?
>
> Well, Mozilla announced a secadv for pdf.js recently, so there's that.
>
> https://www.mozilla.org/en-US/security/advisories/mfsa2015-69/

Ugh, here comes another:

https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/

This one seems specially nasty in the context of Tor. Notice the following sentence:

> Mozilla has received reports that an exploit based on this vulnerability *has
> been found in the wild*.

The bug report is apparently still embargoed.