Hacker News new | ask | show | jobs
by Gigachad 547 days ago
It might be in the PDF spec, but most viewers won't run JS.
1 comments

The most widely ones run JS. And the majority of pdf exploits are not js, but a wide mix over all the things a pdf reader supports.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Acrobat