Home » Articles » Adobe Reader to get a protected mode

Adobe Reader to get a protected mode

Share |

I am sure we are all aware that Adobe Reader is one of the most targeted applications. But Adobe isn't going to allow that to happen without a fight.

Adobe introduced Adobe Reader Protected Mode today. This protected mode is based on technologies such as Microsoft's Practical Windows Sandboxing technique, which is like Google Chrome's sandbox, and Microsoft Office 2010's Protected Viewing Mode. They worked closely with Microsoft Office security team, Google Chrome team members and other third-parties as well.

When Protected Mode is enabled (which will be so by default), any and all operations which occur when displaying a PDF file to a user run in a very restricted manner (the sandbox). If an operation restricted by this sandbox is to occur, they will be ran through, what they call, a "broker process," which will stop access to dangerous functionality.

Even if an exploitable security vulnerability is found by an attacker, Adobe Reader Protected Mode will help prevent the attacker from writing files, changing registry keys or installing malware on potential victims’ computers.

- Brad Arkin of Adobe

These restricted operations include such things as writing to the user's temporary folder or launching attachments with an external application (Microsoft Word, PowerPoint and so on).

Adobe says that this Protected Mode is scheduled to be included in the next major release of Adobe Reader. The first implementation will only sandbox "write" calls on Windows 7, Vista, XP, Server 2008 and Server 2003. So infected PDF files won't be able to install malware or change a computers registry settings. Eventually there are plans to implement sandboxing to "read" calls as well, which would prevent the reading of sensitive information on someone's computer.

Currently no information about a release date for this feature is available.

Categories: Internet, News, Security, Software

Tags: Adobe, Adobe Reader

Comments [Add a comment]

(Displaying 1 out of 1 comments)

By TheMarker0 on July 22, 2010, 09:48:56 PM.

Because virus checkers, and firewalls aren't usefull at all. Now we have to attach a condom to Adobe. >_>

Reply | Report | Permalink