Thank you Thomas.
Since I don't have a Windows VM to dismantle these for scanning, and the
businesses involved deal heavily in PDF exchange, is using :JSPDF
extremely risky, somewhat risky, or something else? Or is that not
knowable?
I wonder what percentage of ASSP installations allows these PDFs.
- Bob
On 3/10/2020 10:16 AM, Thomas Eckardt wrote:
You can allow JavaScript in PDF files (ASSP_AFC) using the :JSPDF
exception in attachment blocking rules.
:JSPDF - adobe PDF file with JavaScript inside - notice: well known
malicious JavaScript combinations will be blocked, even this option is
defined
Thomas
Von: "Robert K Coffman Jr. -Info From Data Corp."
<bcoff...@infofromdata.com>
An: assp-user@lists.sourceforge.net
Datum: 10.03.2020 12:23
Betreff: Re: [Assp-user] PDF Scanning
------------------------------------------------------------------------
They all have this in common:
'prohibited JavaScript in PDF file' - SHA256:
D6CB05FFD99283A4C5C6BEAF37D0274B985E1D47DD3B12F08B348F42CC1A60CA
However the checksums vary unfortunately.
Thanks!
- Bob
On 3/10/2020 2:29 AM, Thomas Eckardt wrote:
It would be nice to know, why these PDF's are blocked - the reason is
shown in the maillog.txt.
Thomas
Von: "Robert K Coffman Jr. -Info From Data Corp."
<bcoff...@infofromdata.com>
An: assp-user@lists.sourceforge.net
Datum: 09.03.2020 17:53
Betreff: [Assp-user] PDF Scanning
------------------------------------------------------------------------
We are getting a large number of false positives on PDFs received.
What are other people doing with these?
Thanks!
- Bob
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential,
legally privileged and protected in law and are intended solely for the
use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential,
legally privileged and protected in law and are intended solely for the
use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
