Conversation

Notices

1. DarkMahesvara (darkmahesvara@varishangout.net)'s status on Tuesday, 21-May-2024 00:27:19 JST DarkMahesvara
   "PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (< version 126) because PDF.js is used by Firefox to show PDF files, but also seriously impacts many web- and Electron-based applications that (indirectly) use PDF.js for preview functionality."
   
   https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/
   
   "maybe :javascript: is the problem :thinkinghrr: ....n-no its the PDF implementation of javascript that is the problem"
   • Lapin (lapin@varishangout.net)'s status on Tuesday, 21-May-2024 00:27:18 JST Lapin

     in reply to

     @DarkMahesvara
     damn :javascript:… 💢 💢 they keep causing problems… 💢 💢 :javascript: correction is needed… 💢 💢 💢

   • Ryu (ryuuji@varishangout.net)'s status on Tuesday, 21-May-2024 01:09:49 JST Ryu

     in reply to
     @DarkMahesvara is it fixed yet or still not a patch available?
   • DarkMahesvara (darkmahesvara@varishangout.net)'s status on Tuesday, 21-May-2024 02:28:26 JST DarkMahesvara

     in reply to

     • Ryu
     @ryuuji < 126 version so at least in firefox most recent release it is fixed
     Ryu likes this.