4 ms·

This kind of makes me wonder why PDFs can even act maliciously in the first place. Why does it have the ability to do these things?

• MaxBarraclough 7y ago
  I think it's just that Adobe wanted to add more features, even ones that have no place in the PDF format.
• masklinn 7y ago
  PDF derives from PostScript which is a full-blown programming language so it's an "original sin" either way. Then over time Adobe added a number of interactive (forms), multimedia and rich media (embedded JS) features, leading to even more vectors.
  • gpvos 7y ago
    The page description language part of PDF is based on Postscript, but explicitly simplified to be non-Turing-complete and safe (if implemented sanely). The later additions are the main culprit I think.
    • Piskvorrr 7y ago
      "if implemented sanely" - oh well. The original idea was nice.
• maxerickson 7y ago
  Because computer, a benign feature of pdf can still lead to an exploit in a viewer. Note the attempts at the link to sanitize image formats that don't have over the top complexity. If your question is why an electronic document format has support for images and interactivity, I don't know what to tell you.