Are there any studies regarding the security of PDF viewer software from different vendors? I try to find the most secure reader.
1 Answer
PDF.js has been developed in javascript and is inside the (very secure) js sandbox. Chrome has one of the most secure js sandboxes, so you might want pdf.js in chrome.
Evince is very easily exploitable. I don't know which part the fuzz-testing included, but Evince bases on poppler, so that may make Okular insecure, too.
-
1What about using Chrome PDF Viewer that is bundled with the browser ( chrome://plugins/ ) - is it safe? Aug 10, 2015 at 12:14
-
@MarekAndreansky it runs in a sandbox too, so it can be used for normal use, burt pdf.js in chrome seems to be even safer. Aug 10, 2015 at 23:57
-
-
-
1Do you have any security information about Sumatra PDF viewer? sumatrapdfreader.org/free-pdf-reader.html Even thou pdf.js in Chrome is safer it allocates 26 MB of memory compared to Sumatra that allocates only 6 MB Aug 12, 2015 at 11:09