Telling IE to download a PDF instead of open

[flysarescary]

Anyone know how to do it? Lots of PDF/Java exploits on the web.

 

[James_Clarke]

Say it loud: OBEY.

 

[James_Clarke]

Try Right mouse click on link -> save target as

 

[kidsolo]

Lots of PDF/Java exploits on the web.

Users can turn off this functionality in the Adobe Reader and Adobe Acrobat Preferences by selecting > Edit > Preferences ( > Categories) > Trust Manager > PDF File Attachments and clearing the box 'Allow opening of non-PDF file attachments with external applications.'"

I hope this helps

 

[Deliguy]

in all other versions of windows go to your control panel then go to folder options and go to the file associations. Select pdf and select change then recheck always ask before opening.

In vista it has to be done in your registry
Some instructions here:
Reset Always Ask Before Opening This Type Of File Check Box in Vista IE My Digital Life

 

[flysarescary]

I think kidsolo's suggestion may or may not help to stop exploits. My guess is that it wont stop exploits as this probably only stops adobe reader from opening non .pdf extension files or files with a wrong mime header. I think the pdf exploits are deployed as pdfs.

Deliguy thanks for your help. Unfortunately, when internet explorer is presented with a pdf file, this doesnt stop it from opening the pdf inside the browser with adobe reader and thus executing the exploit.

 

[high risk]

you could just disable java and disable all of the unnecessary cruft in the adobe reader plugin (javascript, etc).

 

[Human]

Zoom out.

 

[high risk]

Zoom out.

i'm an asshat.

not sure whether to be pissed at you wasting my time and bandwidth or at the admins for not having maximum image dimensions (not that that would have saved my bandwidth)