How to read pdf files safely

Sumatra is one example of a PDF viewer that does not provide many of the functions which are most commonly used in PDF exploits. By completely eliminating entire categories of potential attacks, such programs greatly reduce the risk of viewing unknown PDF files. A further advantage of using a less popular viewer is that because it's both less common and less powerful, it's a less interesting target.

The Sumatra viewer could be possibly be exploited by a specially crafted PDF which takes advantage of some unknown bug to cause a buffer overflow, for example. Such cases are rare however, and there have not been any significant security exploits for Sumatra in recent years. Use a virtual machine that can be reverted to clean slate after tests.

If the PDF reader is vulnerable, your real workstation will be much less likely to be affected. Latest versions of Adobe Reader version Obviously, you'll want to close any sensitive PDFs like your bank statements before opening the untrusted one. We can say ALL of the in-the-wild or targetted attack using malicious PDF file are covered with obfuscation techniques to hardened the analysis or detection process.

Most of the obfuscation technique are mainly using JavaScript obfuscation like eval , String. We can advise you to get the latest patched version of PDF reader with turned-off JavaScript functionality to open the file, but the good solution is to get a virtual machine where you can delete it or revert the snapshot after opening the file. Another easy and less time consuming option is to open it in the Sandboxie app, which would isolate it.

You can open the PDF in a container. I guess no one targets Okular running on FreeBSD though it can still be vulnerable , so if you open the file in a VM you should be very safe.

In order to do harm the rogue payload must match the viewer version and the OS and the CPU architecture of course. It is really low-level assembly and memory stuff the payload expects to be placed at a particular memory address and expects some standard system functions to be available. If you change any of those, then the payload may not execute properly or the viewer may simply crash without doing harm.

Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group.

Create a free Team What is Teams? Learn more. How to safely view a malicious PDF? Ask Question. Asked 9 years, 4 months ago. Active 2 days ago.

Viewed 73k times. Improve this question. Anders Is it of a JS kind? I think you can turn off JS. The thing I would do is open it in a virtual machine without network access. Excellent topics, well explained and very enjoyable to read. Alan, a small non-profit I volunteer for is starting up a newsletter. We think our easiest option for a nice looking and easy-to-create document is to use Word or Publisher and save to pdf — distributing the pdf as an email attachment.

In other words, for a pdf to be insecure to open, does it have to have been intentionally created to be malicious? We realize we could use Outlook or another email program that allows fancier formatting in the body of an email message and, therefore, avoid attachment. Need : to open PDF files more safely. But not anymore. Keep your system up to date Not just the operating system. Guide: Backup to cloud storage using Boxcryptor January 21, 6 tips to make your home Wi-Fi more secure April 25, 8 tips to make your home router more secure May 17, Silicon 11 Jul Reply.

Download Article Explore this Article methods. Related Articles. Article Summary. Author Info Last Updated: December 9, Method 1. Download Adobe Reader. This is a free program that can open PDF files so that you can read them. Adobe Reader can be downloaded from get. You cannot use it to edit or create PDF files. To learn how to edit PDF files, click here. You can edit PDF files online also. Decline the McAfee offer.

When installing Adobe Reader, a box will be automatically checked to add McAfee to your computer. Most users likely will not want this, so make sure to uncheck the box.

For most users, Reader should open automatically, displaying your PDF file. Enter the password if required. PDF files can be password-protected by the creator, so you'll need the correct password if one is required. Windows asks for a program to open the file. Select "Adobe Reader" from the list of programs.

If Adobe Reader is not listed, you will need to browse for it on your computer. PDF requires a password. If the PDF file requires a password and you don't have it, the only way to open it will be to ask the creator for the password or to use a password cracking program.

If the password is strong, a cracking program could take hours or even days to recover the password. PDF won't open for compliance reasons. You may lose some of the formatting, but there's a better chance that you will be able to open it.

Method 2. Double-click the PDF. Preview allows you to read PDF files, but not edit them. Select a PDF file in Finder but don't open it. Click the File menu and select "Get Info". Expand the "Open with" section. Select the application you want to use in the drop-down menu.

Click Change All PDFs can be password protected to prevent unauthorized readers from opening the file. If you don't have the password, the only way to open the file is by cracking the password. Privacy policy. PDF files make up a large part of our day-to-day lives.

They come in the form of contracts and agreements, newsletters, forms, research articles, resumes, and so on. These files highlight the need for a reliable, secure, and powerful PDF reader that can be adopted by Enterprises. Microsoft Edge comes with a built-in PDF reader that lets you open your local pdf files, online pdf files, or pdf files embedded in web pages. You can annotate these files with ink and highlighting. The following table shows which channels and versions of Microsoft Edge support each PDF reader feature.

They can be accessed through a pin-able toolbar at the top of PDF content. This section gives an overview of some important functions. The next screenshot shows the PDF reader toolbar. Table of contents lets users easily navigate through PDF documents that have a table of contents.

When a user clicks the Table of contents icon, a navigation pane that shows a list of the labeled sections and subsections in the PDF document is shown. The user can then click any of the labels in the pane to navigate to that section of the document. The pane stays open for as long as needed and can be closed when the user wants to go back to reading the document. The next screenshot shows the navigation pane for an open document. Users can change the layout of a document from a single page view to two pages that are displayed side by side.

The two page view is shown in the next screenshot. If a user presses the F7 key anywhere in the browser, they're asked if caret browsing should be turned on. If enabled, caret browsing is available for any content opened in the browser, be it PDF files or web pages.

When a user presses F7 again, caret browsing is turned off. When caret browsing is active and the focus is on the content, users will see a blinking cursor in the PDF file. The caret can also be used to navigate through the file, or to select text by pressing Shift while moving the cursor.