Bug 427737

Summary:	Possible vulnerability or not translated message?
Product:	[Applications] okular	Reporter:	Mihai Sorin Dobrescu <msdobrescu>
Component:	PDF backend	Assignee:	Okular developers <okular-devel>
Status:	RESOLVED INTENTIONAL
Severity:	major	CC:	oliver.sander
Priority:	NOR
Version First Reported In:	1.11.1
Target Milestone:	---
Platform:	Gentoo Packages
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	The button with the link The message The downloaded file - the file that raised the message in Okular

Description Mihai Sorin Dobrescu 2020-10-15 06:44:31 UTC

SUMMARY

A message in French, a language that is not installed in my system, appears when

STEPS TO REPRODUCE

Open a file downloaded from here: https://www.electrolux.ro/laundry/laundry/washer-dryers/free-standing-washer-dryer/ew7w468w/. Sorry, it's in Romanian, this model seems to redirect there. Look for "Eticheta energetica" button to download the file or see the attachments. The current direct link to the file is: https://productinformation.electrolux.com/SERVICES/PIServices/EdenService.svc/WEB/GetOldEnergyLabel/productid=CE0680F5-B557-4896-8E3A-31BE712641FF/languageid=9B8BA122-03F7-4273-948D-42E95FAECD7D/format=PDF

The file is called EnergyLabel_EW7W468W.pdf.

Opening in KDE, from Dolphin, with Okular, a message is displayed after a few seconds more than usual for a PDF file:

"Ce fichier PDF exige l'utilisation d'une plus récente version d'Adobe Reader. Appuyez sur OK pour télécharger la plus récente version ou communiquez avec votre administrateur système."

After that, the file opens fine.

SOFTWARE/OS VERSIONS

Operating System: Gentoo Linux
KDE Plasma Version: 5.19.5
KDE Frameworks Version: 5.74.0
Qt Version: 5.15.0
Kernel Version: 5.7.0-sabayon
OS Type: 64-bit
Processors: 8 × Intel® Core™ i7 CPU 920 @ 2.67GHz
Memory: 23,5 GiB of RAM
Graphics Processor: GeForce GTX 1060 6GB/PCIe/SSE2

ADDITIONAL INFORMATION

For me it's strange that a message in other language asks to install Adobe Reader from Okular. Is it possible to run some script? In such case it's a behaviour that should be warned to the user first.

Comment 1 Mihai Sorin Dobrescu 2020-10-15 06:46:03 UTC

Created attachment 132376 [details]
The button with the link

Comment 2 Mihai Sorin Dobrescu 2020-10-15 06:46:20 UTC

Created attachment 132377 [details]
The message

Comment 3 Mihai Sorin Dobrescu 2020-10-15 06:47:05 UTC

Created attachment 132378 [details]
The downloaded file - the file that raised the message in Okular

Comment 4 Oliver Sander 2020-10-15 07:31:28 UTC

That French message is in the file itself.  Uncompress the pdf file using, e.g., podofouncompress, and open it in a text editor.  You will find 

59 0 obj
<<
/Length 1358
>>
stream
if (typeof(this.ADBE) == "undefined")
   this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Mise à jour des formulaires interactifs Adobe";
ADBE.Reader_string_Need_New_Version_Msg = "Ce fichier PDF exige l'utilisation d'une plus récente version d'Adobe Reader. Appuyez sur OK pour télécharger la plus récente version ou communiquez avec votre administrateur système.";
ADBE.Viewer_string_Need_New_Version_Msg_Old = "Ce fichier PDF requiert une version plus récente d'Acrobat. Copiez cette URL et collez-la dans le navigateur, ou contacter l'admin. sys.";
ADBE.Viewer_string_Need_New_Version_Msg = "Ce formulaire PDF requiert une version d'Adobe Acrobat plus récente. Sans cela, le formulaire s'affiche mais risque de ne pas fonctionner correctement. Certains éléments de formulaire risquent de ne pas s'afficher. Cliquez sur OK pour savoir comment obtenir la dernière version d'Adobe Reader.";
ADBE.Viewer_string_Need_New_Version_Msg_Updater = "Ce formulaire PDF requiert une version d'Adobe Acrobat plus récente. Sans cela, le formulaire s'affiche mais risque de ne pas fonctionner correctement. Certains éléments de formulaire risquent de ne pas s'afficher. Si vous disposez d'une connexion Internet, cliquez sur OK pour télécharger et installer la dernière version du produit.";

endstream
endobj

In conclusion, it's the intended behavior, even though it appears weird.

Comment 5 Mihai Sorin Dobrescu 2020-10-15 09:32:42 UTC

OK, thank you!