New issue
Advanced search Search tips

Issue 724465 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 691948
Owner: ----
Closed: May 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Able to save protected data from adobe web application in chrome browser

Reported by din2...@gmail.com, May 19 2017

Issue description



VULNERABILITY DETAILS

If i open a protected PDF file by giving credential or Read only PDF in chrome adobe web application, I can easily able to save a unprotected copy of the original protected PDF by pressing CTRL+P where i can get an option to save it as PDF,Once you click on save unprotected copy will be saved on your local disk

VERSION
Chrome Version: [Version 58.0.3029.110 (64-bit)] + [stable]
Operating System: [Windows 7 Enterprise, 7, and service pack 1]

REPRODUCTION CASE

1.Open protected PDF file in chrome web application by dragging the pdf file into chrome browser.
2.then Press CTRL+P, you will see a print screen then on top left corner save button will be there
3.Once you click on save, unprotected copy will be saved on your local disk

 In this case, when Google Chrome enters the printing workflow, it generates a new PDF document in which a new set of permissions are set and it allows users to save unprotected pdf copy on their local disk.

Screenshot(Option where we can save new uprotected pdf file) attached for reference.


 
Option where we can save uprotected copy.PNG
21.4 KB View Download
Components: Internals>Plugins>PDF
Mergedinto: 691948
Status: Duplicate (was: Unconfirmed)
As noted in the duplicate bug, there are many ways to resave information from "protected" PDF files.
Project Member

Comment 2 by sheriffbot@chromium.org, Aug 26 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment