Adobe Reader X (with 'sandboxing' technology) now available

Question

The following was excerpted from http://blogs.adobe.com/asset/2010/07/introducing-adobe-reader-protected-mode.html

With Adobe Reader Protected Mode enabled (it will be by default), all operations required by Adobe Reader to display the PDF file to the user are run in a very restricted manner inside a confined environment, the “sandbox.” Should Adobe Reader need to perform an action that is not permitted in the sandboxed environment, such as writing to the user’s temporary folder or launching an attachment inside a PDF file using an external application (e.g. Microsoft Word), those requests are funneled through a “broker process,” which has a strict set of policies for what is allowed and disallowed to prevent access to dangerous functionality.

The initial release of Adobe Reader Protected Mode will be the first phase in the implementation of the sandboxing technology. This first release will sandbox all “write” calls on Windows 7, Windows Vista, Windows XP, Windows Server 2008, and Windows Server 2003. This will mitigate the risk of exploits seeking to install malware on the user’s computer or otherwise change the computer’s file system or registry. In future releases of Adobe Reader, we plan to extend the sandbox to include read-only activities to protect against attackers seeking to read sensitive information on the user’s computer.

Adobe Reader Protected Mode represents an exciting new advancement in attack mitigation. Even if an exploitable security vulnerability is found by an attacker, Adobe Reader Protected Mode will help prevent the attacker from writing files, changing registry keys or installing malware on potential victims’ computers.

(Comment: I hope to download and start "playing" with this tomorrow.)

ky331 · Answer

Messages from Adobe

The General preferences include options for allowing Adobe to display in-product marketing messages while you work in the program. You decide whether to receive these in-product marketing messages.

Note: Transactional messages, which facilitate the Adobe Online Service, cannot be turned off.

Open the Preferences dialog box.
- (Windows) Choose Edit > Preferences.
- (Mac OS) Choose Adobe Reader > Preferences.
Under Categories, click General.
In the Messages From Adobe section, select options as desired.

Show Me Messages When I Launch Reader

Allows messages from Adobe to appear in the Welcome Screen when you launch the application without a document open. Click a message to get information about features, updates, or online services, or to open an element in the application, such as a task pane. Deselect the option to prevent in-product marketing messages from appearing.

Don’t Show Messages While Viewing A Document

Prevents in-product marketing messages from Adobe from appearing in the lower-left corner of the application window. Click the close button to dismiss the message. The message fades away if you do nothing. Leave the option deselected to allow in-product marketing messages.

ky331 · Answer

1) To clarify, Adobe is now using Roman Numeral "X" to designate the newest Acrobat/Reader version --- which would have been "10" using standard numerals.

2) You can either install version X "on top of" version 9 [which will automatically remove version 9], or remove version 9 first. By default, version X installs in

C:\Program Files\Adobe\Reader 10.0

(at least, on XP systems).

After explicit or automatic removal of v.9 , you may find a "leftover" folder C:\Program Files\Adobe\Reader 9

which can then be safely removed.

ky331 · Answer

for EMET users: Since you must 'opt-in' programs via an explicit path designation,  you need to ADD  AcroRd32.exe  using the new path   C:\Program Files\Adobe\Reader 10.0\Reader (You should first remove the older AcroRd32 reference, which would have gone through the 'Reader 9' folder.)

Bugbatter · Answer

System Requirements:    * Intel® 1.3GHz or faster processor    * Microsoft® Windows® XP Home, Professional, or Tablet PC Edition with Service Pack 3 (32 bit) or Service Pack 2 (64 bit); Windows Server® 2003 (with Service Pack 2 for 64 bit; Windows Server® 2008 (32 bit and 64 bit); Windows Server 2008 R2 (32 bit and 64 bit); Windows Vista® Home Basic, Home Premium, Business, Ultimate, or Enterprise with Service Pack 2 (32 bit and 64 bit); Microsoft Windows 7 Starter, Home Premium, Professional, Ultimate, or Enterprise (32 bit and 64 bit)    * 256MB of RAM (512MB recommended)    * 260MB of available hard-disk space    * 1024x576 screen resolution    * Microsoft Internet Explorer 7 or 8; Mozilla Firefox 3.5 or 3.6    * Video hardware acceleration (optional) (Supposedly Adobe removes the previous version, but I Uninstalled my previous version of Reader first anyway.) Adobe Reader X resets the security settings that you used before.  Therefore, after installing Adobe Reader X reconfigure the following: Disable Javascript When your new AR is open, click on Edit and select Preferences. Then click on the Javascript category and uncheck Enable Acrobat Javascript.Disable Windows Trusted Sites Also while open, click on Edit and select Preferences. Then click on the Security (Enhanced) category and uncheck Automatically trust sites from my Win OS security zones.Secure Trust Manager  One more setting in AR: click on Edit and select Preferences. Then click on the Trust Manager category and uncheck Allow opening of non-PDF file attachments with external applications. Download links: Download for Windows There is also a version for Mac

ky331 · Answer

Thanks BB for the suggested security-enhancing settings.

Another one: for those who wish to control WHEN Reader gets its updates, click on the Updater category

and click on Do not download or install updates automatically

[or, if you prefer, Automatically download updates, but let me choose when to install them].

==================

you wrote: (Supposedly Adobe removes the previous version, but I Uninstalled my previous version of Reader first anyway.)

As noted above, I tried it both ways (on two different machines), and confirmed that installation of v10 automatically removed v9's files, but left-over a folder for v9.

ky331 · Answer

Interesting. I have Adobe ARM (as well as Speed Launcher) on DISABLE via WinPatrol, and neither one is pestering me. How about your updater settings, as I mentioned above --- maybe if you set it to do not automatically download or install??

Another point I'd like to mention here: There seems to be a difference depending on whether you try to download Reader in IE vs. other browers: If you attempt the download in IE, it first prompts [and I believe requires] you to download the Adobe Download Manager, which in turn downloads/installs Reader. In contrast, when you attempt the download in Opera (and perhaps other non-IE browsers), it "simply" downloads the Reader program for installation, withOUT forcing access of the separate "download manager".

Bugbatter · Answer

Windows 7 Pro - 64 bit:

I had no leftover folder for version 9. It must have flown out when I did the manual uninstall

I still have to disable ARM from pestering me about Startup. WinPatrol no help with Startup or Active Tasks, and Windows Startup setting no help.There must be a setting I'm missing.:emotion-12:

Bugbatter · Answer

maybe if you set it to do not automatically download or install?? Yes, did that earlier. I'm going to try allowing it and then AGAIN manually going via WinPatrol etc. (rather than having AR automatically pester me post installation.

Bugbatter · Answer

So far, so good.That seemed to fix the issue.

iroc9555 · Answer

Hi guys.

Unfortunately AR X has not came out in Spanish to try it out. When I clicked my AR9 "search for updates", it said there is none. I went to Adobe web page (es) and they do not have X yet. I know BB set a link to download X and unless it is multi language, it must be in English. Since my OS is in Spanish and my browser too, I am redirected to the Adobe download page in Spanish every time. Any idea when Adobe will have X in Spanish?

Regards.

mona7865 · Answer

Hernan, Adobe Reader X isn't available in Dutch either (I still get version 9.4.1. when I check for updates) so I think we have to be patient till AR X will be released in our language. :emotion-5:

iroc9555 · Answer

Thank you mona. I'll be waiting. Regards.

Virus & Spyware

Adobe Reader X (with "sandboxing" technology) now available

Messages from Adobe

Was this post helpful?