Comments (5)
Same problem at mine computer! I'm running Windows 7 x64, Ruby 1.9.2-p290,
Origami 1.2.3... Anti-virus software is ESET Smart Security 4 (NOD32).
Regards,
Stole
Original comment by [email protected]
on 25 Oct 2011 at 12:40
from origami-pdf.
Hello,
Origami ships with a few exploit samples taken from old vulnerabilities in the
wild.
As they contain potentially malicious JS scripts, they may be detected as
malware, although they shouldn't since they are contained in Ruby scripts.
does your AV software reports which files are concerned?
Original comment by [email protected]
on 25 Oct 2011 at 6:27
- Added labels: OpSys-Windows, Type-Other, Usability
- Removed labels: Type-Defect
from origami-pdf.
Thanks for the response...
About AV report, well, I have not paid attention. :( I exited my AV, installed
gem, and then started AV again. I will try to reproduce issue on my other
computer, I will let You know.
Regards,
Stole
Original comment by [email protected]
on 25 Oct 2011 at 7:36
from origami-pdf.
Hi,
Here is the log of NOD AV:
http://production.cf.rubygems.org/gems/origami-1.2.3.gem multiple
threats connection terminated - quarantined Threat was detected upon access to
web by the application: C:\Ruby192\bin\ruby.exe.
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR »
data.tar.gz multiple threats
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR » data.tar.gz
» GZIP » data.tar multiple threats
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR » data.tar.gz
» GZIP » data.tar » TAR »
samples/exploits/cve-2008-2992-utilprintf.rb JS/Exploit.Shellcode.A.gen trojan
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR » data.tar.gz
» GZIP » data.tar » TAR »
samples/exploits/cve-2009-0927-geticon.rb JS/Exploit.Shellcode.B trojan
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR » data.tar.gz
» GZIP » data.tar » TAR »
samples/exploits/exploit_customdictopen.rb JS/Exploit.Shellcode.A.gen trojan
http://production.cf.rubygems.org/gems/origami-1.2.3.gem » TAR » data.tar.gz
» GZIP » data.tar » TAR »
samples/exploits/getannots.rb JS/Exploit.Shellcode.A.gen trojan
Regards,
Stole
Original comment by [email protected]
on 26 Oct 2011 at 11:13
from origami-pdf.
Yes, I tried installing origami 1.2.3 gem, McAfee didn't like
exploit_customdictopen.rb when it was unpacking in folder C:\Ruby
193\lib\ruby\gems\1.9.1\cache\origami-1.2.3.gem\data.tar.gz\data.tar.
It "detects" it as JS/Exploit-BO.gen.
Unfortunately, my AV product is controlled by group policy, and I can't
configure it to ignore it.
I'm going to install it on linux instead, but if you wanted to know what it was
hitting the above was it.
Original comment by [email protected]
on 10 Nov 2011 at 9:41
from origami-pdf.
Related Issues (20)
- Error on saving obfuscated pdf
- ccittfaxdecode issue when rows > 1 HOT 1
- Support filter abbreviation HOT 1
- Patch for /lib/origami/graphics/instruction.rb HOT 1
- Patch for /lib/origami/numeric.rb HOT 4
- Patch for /lib/origami/graphics/instruction.rb HOT 1
- Linearized document causes error: Cannot remove last revision
- Can't decrypt file because of wrong padding HOT 1
- Cannot compute correct okey in AESv3 R5 HOT 1
- pdf.encrypt incompatible character encodings: UTF-8 and ASCII-8BIT HOT 2
- No tests, examples, or documentation on how to use acro/xdp forms
- Error: uninitialized constant Origami::DICT_SPECIAL_TYPES HOT 1
- Created ruby script from PDF, script produces error HOT 4
- Please include tests in releases uploaded to rubygems
- Move project to GitHub
- The avast detected origami includes virus
- Unable to process signed document from Adobe Echosign
- Creating clean pdf destroys pdf
- Error during launch of pdfwalker
- undefined method `[]=' for nil:NilClass
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from origami-pdf.