[WEB SECURITY] Re: Universal XSS with PDF files: highly dangerous

[The Anarcat <anarcat@xxxxxxxxxxxxxx>]

--BOKacYhQ+x31HxR3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Anyone knows how this affects opensource PDF viewers like gpdf or
evince? As I understand this vulnerability, it's only effective
against embeded PDF readers, right?

A.

--BOKacYhQ+x31HxR3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFopsQWGBzs0AjcC8RArDTAJ49VSIiwkguR8WPaAyOxPOp459fCQCghAZO
lbWermG9VHh3b+mI53xFBPI=
=H2fG
-----END PGP SIGNATURE-----

--BOKacYhQ+x31HxR3--