Adobe Acrobat#Security

The main function of Adobe Acrobat is creating, viewing, and editing PDF documents. It can import popular document and image formats and save them as PDF. It is also possible to import a scanner's output, a website, or the contents of the Windows clipboard.

Because of the nature of the PDF, however, once a PDF document is created, its natural organization and flow cannot be meaningfully modified. In other words, Adobe Acrobat is able to modify the contents of paragraphs and images, but doing so does not repaginate the whole document to accommodate for a longer or shorter document. Acrobat can crop PDF pages, change their order, manipulate hyperlinks, digitally sign a PDF file, add comments, redact certain parts of the PDF file, and ensure its adherence to such standards as PDF/A.

{{further|Adobe Acrobat version history}}

Adobe Acrobat was launched in 1993 and had to compete with other products and proprietary formats that aimed to create digital documents:

• Common Ground from No Hands Software Inc.{{cite journal |last1=Borzo |first1=Jeanette |title=Paperless: Tools resurrect hope for paperless office concept |journal=InfoWorld |date=14 June 1993 |volume=15 |issue=24 |url=https://books.google.com/books?id=QDsEAAAAMBAJ&pg=PA24 |issn=0199-6649}}
• Envoy from WordPerfect Corporation
• Folio Views from NextPage
• Replica from Farallon Computing{{cite journal |last1=Eckerson |first1=Wayne |title=Farallon gives Adobe Acrobat run for money |journal=Network World |date=26 July 1993 |volume=10 |issue=30 |page=86 |url=https://books.google.com/books?id=mhAEAAAAMBAJ&pg=PA86 |publisher=International Data Group |issn=0887-7661}}
• WorldView from Interleaf{{cite journal |last1=Jarrin |first1=Christopher |title=Reading what you sow |journal=InfoWorld |date=22 July 1996 |volume=18 |issue=30 |page=66 |url=https://books.google.com/books?id=Ij0EAAAAMBAJ&pg=PA66 |issn=0199-6649}}
• DjVu from AT&T Laboratories

{{multiple image |footer = Old logos of Acrobat programs and services |width=64 |caption_align=center |perrow=3

|image1 = Adobe Acrobat XI.png |caption1=Acrobat XI

|image2 = Adobe Reader XI icon.png |caption2=Reader XI

|image3 = Adobe Distiller X icon.png |caption3=Distiller XI

|image4 = Adobe Acrobat dot com (2012).png |caption4=Acrobat.com

|image5 = Adobe CreatePDF icon.png |caption5=CreatePDF

|image6 = Adobe ExportPDF icon.png |caption6=ExportPDF

|image7 = Adobe EchoSign icon (2012).png |caption7=EchoSign

|image8 = Adobe FormsCentral icon.png |caption8=FormsCentral

|image9 = Adobe SendNow icon.png |caption9=SendNow

}}

Adobe has renamed the Acrobat products several times, in addition to merging, splitting and discontinuing them. Initially, the offered products were called Acrobat Reader, Acrobat Exchange and Acrobat Distiller. "Acrobat Exchange" soon became "Acrobat". Over time, "Acrobat Reader" became "Reader". Between versions 3 and 5, Acrobat did not have several editions.{{clarify |date=June 2019 |reason=Can we have some more clarity on what this means? Rewrite into a positive statement of what it DID have, or explain how it differed from the apparent expectation here? }} In 1999, the Acrobat.com service came to being and introduced several web services whose names started with "Acrobat", but eventually, "Acrobat.com" was downgraded from the name of the family of services, to that of one of those services.

Unlike most other Adobe products, such as members of Adobe Creative Suite family, the Acrobat products do not have icons that display two letters on a colored rectangle.

In April 2015, Adobe introduced the "Document Cloud" branding (alongside its Creative Cloud) to signify its adoption of the cloud storage and the software as a service model. Programs under this branding received a "DC" suffix. In addition, "Reader" was renamed back to "Acrobat Reader".{{cite news|last1=Heller|first1=Martin|title=Review: Adobe Acrobat polishes its act|url=http://www.infoworld.com/article/2907656/office-software/review-adobe-acrobat-dc-polishes-its-act.html|access-date=28 March 2016|work=InfoWorld|date=April 9, 2015}}{{cite news|last1=Frank|first1=Blair Hanley|title=Adobe teams up with Dropbox as part of Document Cloud upgrades|url=http://www.infoworld.com/article/2992453/cloud-storage/adobe-teams-up-with-dropbox-as-part-of-document-cloud-upgrades.html|access-date=28 March 2016|work=IDG News Service|date=October 13, 2015}} Following the introduction of Document Cloud, Acrobat.com was discontinued as their features were integrated into the desktop programs and mobile apps.

The GUI had major changes with the introduction of Acrobat DC in 2015, which supports Windows 7 and later, and OS X 10.9 and later. Version numbers are now identified by the last two digits of the year of major release, and the month and year is specified; the previous version was 12, but examples of the DC (Document Cloud) Acrobat product family versions are DC June 2016, version 15.016.20045, released 2 June 2016 and DC Classic January 2016, version 15.006.30119, released 12 January 2016.{{cite web|url=https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html|title=Release Notes - Acrobat, Reader|work=Acrobat Help |publisher=Adobe Systems}} From DC 2015 the Acrobat family is available in two tracks, the original track, now named Classic, and the Continuous track.{{cite web |url=https://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/whatsnewdc.html |title=Document Cloud Product Tracks — Enterprise Administration Guide |website=Adobe.com |access-date= 27 June 2016}} Updates for the Classic track are released quarterly, and do not include new features, whereas updates for the Continuous track are issued more frequently, and implemented silently and automatically.{{Cite web|url=https://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/whatsnewdc.html|title = Document Cloud Product Tracks — Deployment Planning and Configuration}}

The last pre-DC version, Acrobat XI, was updated to 11.0.23 version (and this was the final release{{Cite web|url=https://helpx.adobe.com/security/products/acrobat/apsb17-36.html|title=Adobe Security Bulletin|website=helpx.adobe.com|language=en|access-date=2017-11-30}}) on November 14, 2017,{{Cite web|url=http://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotes/11/11.0.23.html#elevenzerozerotwentythree|title=11.0.23 Planned update, November 14, 2017 — Acrobat and Adobe Reader Release Notes|website=www.adobe.com|access-date=2017-11-30}} support for which had ended a month earlier on October 15, 2017.{{cite web|title=Adobe Support Policies: Supported Product Versions|url=https://www.adobe.com/support/programs/policies/supported.html|website=Adobe|access-date=20 October 2016|date=2016}} In September 2020, Adobe released a feature to make documents easier to read on phones called "Liquid Mode" using its Sensei AI.{{Cite web |last=Moon |first=M. |date=September 23, 2020 |title=Adobe's Liquid Mode uses AI to make PDFs easier to read on phones |url=https://www.engadget.com/adobe-liquid-mode-130012210.html |access-date=2022-05-31 |website=Engadget |language=en-US}}

• Acrobat.com is the web version of Acrobat developed by Adobe to edit, create, manipulate, print and manage files in a PDF. It is currently available for users with a web browser and an Adobe ID only.
• Acrobat Distiller is a software application for converting documents from PostScript format to PDF.
• Acrobat Pro is the professional full version of Acrobat developed by Adobe to edit, create, manipulate, print and manage files in a PDF. It is currently available for Windows and macOS.
• Acrobat Reader is the freeware version of Acrobat developed by Adobe to view, create, fill, print and format files in a PDF. It is currently available for Windows, macOS, iOS, and Android.
• Acrobat Standard is the standard full version of Acrobat developed by Adobe to edit, create, manipulate, print and manage files in a PDF. It is currently available for Windows.
• Document Cloud is part of the Acrobat family developed by Adobe to edit, create, save online, print and format files in a PDF. It is currently available for users with a web browser and an Adobe ID only.
• Fill & Sign is part of the Acrobat family developed by Adobe to fill, sign, and manage files in a PDF. It is currently available for Windows, macOS, iOS, and Android.
• Scan is part of the Acrobat family developed by Adobe Inc. to scan, crop, and manage files in a PDF. It is currently available for iOS and Android.
• Sign (formerly EchoSign and eSign) is part of the Acrobat family developed by Adobe Inc. to fill, sign, and manage files in a PDF. It is currently available for iOS and Android.{{cite web|title=Adobe Acrobat DC FAQ|url=https://helpx.adobe.com/acrobat/faq.html|access-date=20 August 2018|website=helpx.adobe.com|publisher=Adobe Systems}}

• Acrobat Approval allows users to deploy electronic forms based on a PDF.{{Cite web|title=Adobe Releases Acrobat Approval 5.0|url=https://www.infotoday.com/it/oct01/news11.htm|access-date=2021-04-12|website=www.infotoday.com}}
• Acrobat Business Tools is a discontinued component of the Acrobat family that was distributed by Adobe Systems with collaboration and document review features.
• Acrobat Capture is a document processing utility for Windows from Adobe Systems that converts a scan of any paper document into a PDF file with selectable text through OCR technology.
• Acrobat Distiller Server is a discontinued server-based utility that was developed by Adobe Systems to perform centralized high-volume conversion of PostScript documents to PDF formats for workgroups.
• Acrobat eBook Reader is a PDF-based e-book reader from Adobe Systems. Features present in Acrobat eBook Reader later appeared in Digital Editions.
• Acrobat Elements was a very basic version of the Acrobat family that was released by Adobe Systems. Its key feature advantage over the free Acrobat Reader was the ability to create reliable PDF files from Microsoft Office applications.{{Cite web|date=2003-04-07|title=Acrobat family - Product comparison|url=http://www.adobe.com/products/acrobat/matrix.html|access-date=2021-04-12|archive-url=https://web.archive.org/web/20030407154627/http://www.adobe.com/products/acrobat/matrix.html|archive-date=2003-04-07}}
• Acrobat InProduction is a pre-press tools suite for Acrobat released by Adobe in 2000 to handle color separation and pre-flighting of PDF files for printing.
• Acrobat Messenger is a document utility for Acrobat users that was released by Adobe Systems in 2000 to convert paper documents into PDF files that can be e-mailed, faxed, or shared online.
• Acrobat Reader Touch is a free PDF document viewer developed and released on December 11, 2012, by Adobe Systems for the Windows Touch user interface.
• FormsCentral was a web form filling server for users with Windows, macOS, or a web browser and an Adobe ID only. It was discontinued on July 28, 2015, and replaced with Experience Manager Forms.
• Send & Track (formerly SendNow and Send) was a service that lets you send files as links, track files you send to specific individuals, and get confirmation receipts when others view your file. It was completely discontinued as of July 11, 2018.

• Acrobat Synchronizer is a tool installed along with Acrobat versions. While running in the background, it maintains the accuracy of Acrobat files imported to Acrobat.{{Cite web|title=What is Adobe Acrobat Synchronizer? {{!}} Techwalla|url=https://www.techwalla.com/articles/what-is-adobe-synchronizer}}
• RdrCEF (also known as Adobe Reader Cloud Extension Feature) is a tool bundled with Acrobat that runs a process that handles cloud connectivity features.{{Cite web|title=RdrCEF.exe Windows process - What is it?|url=https://www.file.net/process/rdrcef.exe.html#:~:text=The%20genuine%20RdrCEF.exe%20file,that%20handles%20cloud%20connectivity%20features.|access-date=2021-05-19|website=www.file.net}}

The table below contains some of the supported file formats that can be opened or accessed in Adobe Acrobat.{{Cite web |title=Adobe Acrobat DC 2019 Overview and Supported File Types |url=https://fileinfo.com/software/adobe/acrobat |access-date=2021-04-21 |website=fileinfo.com}}

{{Original research section|date=May 2022}}

Adobe Acrobat is available in the following languages: Arabic, Chinese Simplified, Chinese Traditional, Czech, Danish, Dutch, English, Finnish, French, German, Greek, Hebrew, Hungarian, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Romanian, Russian, Spanish, Swedish, Turkish and Ukrainian. Arabic and Hebrew versions are available from WinSoft International,{{cite web

|url = http://www.winsoft-international.com/en/products/adobe-acrobat-9-pro.html

|title = Adobe Acrobat Professional software – Communicate and collaborate with the essential PDF solution, enhanced features for Central and East European and Middle Eastern users

|publisher = Winsoft-international.com

|access-date = 4 December 2010

|archive-url = https://web.archive.org/web/20100831224907/http://www.winsoft-international.com/en/products/adobe-acrobat-9-pro.html

|archive-date = 31 August 2010

|url-status = dead

}} Adobe Systems' internationalization and localization partner.

Before Adobe Acrobat DC, separate Arabic and Hebrew versions were developed specifically for these languages, which are normally written right-to-left. These versions include special TouchUp properties to manage digits, ligatures option and paragraph direction in right-to-left Middle Eastern scripts such as Arabic, Hebrew, and Persian, as well as standard left-to-right Indian scripts such as Devanagari and Gujarati. The Web Capture feature can convert single web pages or entire web sites into PDF files, while preserving the content's original text encoding. Acrobat can also copy Arabic and Hebrew text to the system clipboard in its original encoding; if the target application is also compatible with the text encoding, then the text will appear in the correct script.

A comprehensive list of security bulletins for most Adobe products and related versions is published on their Security bulletins and advisories page and in other related venues.{{cite web|url=https://helpx.adobe.com/security.html#acrobat |title= Security Bulletins and Advisories |work=adobe.com |publisher=Adobe Systems}}{{cite web|url=http://www.locklizard.com/pdf_security_news/ |title=Adobe PDF Security Issues, Acrobat Vulnerabilities, PDF Cracks |publisher=Locklizard}} In particular, the detailed history of security updates for all versions of Adobe Acrobat has been made public.{{cite web|url=https://helpx.adobe.com/security/products/acrobat.html |title=Security Bulletins and Advisories – Adobe Acrobat |work=adobe.com|publisher=Adobe Systems}}

From Version 3.02 onwards, Acrobat Reader has included support for JavaScript. This functionality allows a PDF document creator to include code which executes when the document is read. Malicious PDF files that attempt to attack security vulnerabilities can be attached to links on web pages or distributed as email attachments. While JavaScript is designed without direct access to the file system to make it "safe", vulnerabilities have been reported for abuses such as distributing malicious code by Acrobat programs.{{cite web |url=http://lwn.net/Articles/129729/ |title=Unexpected features in Acrobat 7 |last=Brockmeier |first=Joe |date=30 March 2005 |access-date=20 February 2009 |work=LWN.net |publisher=Eklektix}} Adobe applications had already become the most popular client-software targets for attackers during the last quarter of 2009.{{cite web

|url=http://mcafee.com/us/local_content/reports/threats_2009Q4_final.pdf

|title=McAfee Threats Report: Fourth Quarter 2009

|publisher=McAfee Avert Labs

|page=16

|date=February 2010

|access-date=9 May 2010

|url-status=dead

|archive-url=https://web.archive.org/web/20100215182751/http://www.mcafee.com/us/local_content/reports/threats_2009Q4_final.pdf

|archive-date=15 February 2010

}} McAfee predicted that Adobe software, especially Reader and Flash, would be the primary target for software attacks in the year 2010.

{{cite web

|url=http://mcafee.com/us/local_content/reports/7985rpt_labs_threat-predict_0110_fnl_lores.pdf

|title=2010 Threat Predictions

|publisher=McAfee Labs

|page=2

|date=December 2009

|access-date=9 May 2010

|archive-url=https://www.webcitation.org/5qBbtBYx6?url=http://mcafee.com/us/local_content/reports/7985rpt_labs_threat-predict_0110_fnl_lores.pdf

|archive-date=2 June 2010

|url-status=dead

|df=dmy-all

}}

On September 13, 2006, David Kierznowski provided sample PDF files illustrating JavaScript vulnerabilities. Since at least version 6, JavaScript can be disabled using the preferences menu{{cite web

|url = https://www.zdnet.com/article/adobe-turn-off-javascript-in-pdf-reader/

|title = Adobe: Turn off JavaScript in PDF Reader

|first = Ryan

|last = Naraine

|date = 28 April 2009

|work = ZDNet

|publisher = CBS Interactive

}}

and embedded URLs that are launched are intercepted by a security warning dialog box to either allow or block the website from activating.{{cite web

|url = http://www.eweek.com/article2/0,1895,2016606,00.asp

|archive-url = https://archive.today/20130108143735/http://www.eweek.com/article2/0,1895,2016606,00.asp

|url-status = dead

|archive-date = January 8, 2013

|title = Hacker Discovers Adobe PDF Back Doors

|first = Ryan

|last = Naraine

|date = 15 September 2006

|work = eWeek

|publisher = Ziff Davis Enterprise Holdings Inc

|access-date = 5 August 2011

|quote = David Kierznowski, a penetration testing expert specializing in Web application testing, has released proof-of-concept code and rigged PDF files to demonstrate how the Adobe Reader program could be used to initiate attacks without any user action.

}}

On February 19, 2009, Adobe released a Security Bulletin announcing JavaScript vulnerabilities in Adobe Reader and Acrobat versions 9 and earlier.{{cite web|title=Security Updates available for Adobe Reader and Acrobat versions 9 and earlier|url=https://www.adobe.com/support/security/advisories/apsa09-01.html|work=adobe.com|publisher=Adobe Systems|access-date=11 August 2013|date=19 February 2009}} As a workaround for this issue, US-CERT recommended disabling JavaScript in the affected Adobe products, canceling integration with Windows shell and web browsers (while carrying out an extended version of de-integration for Internet Explorer), deactivating Adobe indexing services and avoiding all PDF files from external sources.{{cite web

|url=http://www.kb.cert.org/vuls/id/905281

|title=Vulnerability Note VU#905281

|publisher=US-CERT

|date=20 February 2009

|access-date=20 February 2009

|archive-url= https://web.archive.org/web/20090223105204/http://www.kb.cert.org/vuls/id/905281

|archive-date= 23 February 2009

|url-status= live

}}

Adobe has identified critical vulnerabilities in Adobe Reader and Acrobat XI (11.0.01 and earlier) for Windows and Macintosh, 9.5.3 and earlier 9.x versions. These vulnerabilities could cause the application to crash and potentially allow an attacker to take control of the affected system. There have been reports of these vulnerabilities being exploited to trick Windows users into clicking on a malicious PDF file delivered in an email message. Adobe recommended users update their product installations.{{cite web

|url = https://www.adobe.com/support/security/advisories/apsa13-02.html

|title = Security Advisory for Adobe Reader and Acrobat

|publisher = Adobe Systems

}}

Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.{{cite web

|url = https://helpx.adobe.com/security/products/acrobat/apsb16-02.html

|title = Security Advisory for Adobe Reader and Acrobat

|publisher = Adobe Systems

}}{{cite web

|url = https://www.us-cert.gov/ncas/current-activity/2016/03/08/Adobe-Releases-Security-Updates-Acrobat-Reader-and-Digital-Editions

|title = Adobe Releases Security Updates for Acrobat, Reader, and Digital Editions

|publisher = United States Computer Emergency Readiness Team

}}

• List of PDF software
• Adobe Acrobat version history

{{Reflist|30em}}

• {{commons-inline}}

{{PDF readers}}

{{AdobeCS}}

{{Adobe eLearning Suite}}

{{Adobe Technical Communication Suite}}

{{Adobe Systems}}

{{DEFAULTSORT:Acrobat}}

Acrobat

Category:Document viewers

Category:PDF readers

Category:PDF software

Category:Proprietary cross-platform software

Category:Symbian software

Category:Technical communication tools

Category:Classic Mac OS software

Category:MacOS text-related software

Category:Windows text-related software

Category:1993 software

Category:Freemium