Bug 427737 - Possible vulnerability or not translated message?
Summary: Possible vulnerability or not translated message?
Status: RESOLVED INTENTIONAL
Alias: None
Product: okular
Classification: Applications
Component: PDF backend (show other bugs)
Version: 1.11.1
Platform: Gentoo Packages Linux
: NOR major
Target Milestone: ---
Assignee: Okular developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-10-15 06:44 UTC by Mihai Sorin Dobrescu
Modified: 2020-10-15 09:32 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
The button with the link (13.50 KB, image/png)
2020-10-15 06:46 UTC, Mihai Sorin Dobrescu
Details
The message (52.53 KB, image/png)
2020-10-15 06:46 UTC, Mihai Sorin Dobrescu
Details
The downloaded file - the file that raised the message in Okular (1.68 MB, application/pdf)
2020-10-15 06:47 UTC, Mihai Sorin Dobrescu
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Mihai Sorin Dobrescu 2020-10-15 06:44:31 UTC
SUMMARY

A message in French, a language that is not installed in my system, appears when 

STEPS TO REPRODUCE

Open a file downloaded from here: https://www.electrolux.ro/laundry/laundry/washer-dryers/free-standing-washer-dryer/ew7w468w/. Sorry, it's in Romanian, this model seems to redirect there. Look for "Eticheta energetica" button to download the file or see the attachments. The current direct link to the file is: https://productinformation.electrolux.com/SERVICES/PIServices/EdenService.svc/WEB/GetOldEnergyLabel/productid=CE0680F5-B557-4896-8E3A-31BE712641FF/languageid=9B8BA122-03F7-4273-948D-42E95FAECD7D/format=PDF

The file is called EnergyLabel_EW7W468W.pdf.

Opening in KDE, from Dolphin, with Okular, a message is displayed after a few seconds more than usual for a PDF file:

"Ce fichier PDF exige l'utilisation d'une plus récente version d'Adobe Reader. Appuyez sur OK pour télécharger la plus récente version ou communiquez avec votre administrateur système."

After that, the file opens fine.

SOFTWARE/OS VERSIONS

Operating System: Gentoo Linux
KDE Plasma Version: 5.19.5
KDE Frameworks Version: 5.74.0
Qt Version: 5.15.0
Kernel Version: 5.7.0-sabayon
OS Type: 64-bit
Processors: 8 × Intel® Core™ i7 CPU 920 @ 2.67GHz
Memory: 23,5 GiB of RAM
Graphics Processor: GeForce GTX 1060 6GB/PCIe/SSE2

ADDITIONAL INFORMATION

For me it's strange that a message in other language asks to install Adobe Reader from Okular. Is it possible to run some script? In such case it's a behaviour that should be warned to the user first.
Comment 1 Mihai Sorin Dobrescu 2020-10-15 06:46:03 UTC
Created attachment 132376 [details]
The button with the link
Comment 2 Mihai Sorin Dobrescu 2020-10-15 06:46:20 UTC
Created attachment 132377 [details]
The message
Comment 3 Mihai Sorin Dobrescu 2020-10-15 06:47:05 UTC
Created attachment 132378 [details]
The downloaded file - the file that raised the message in Okular
Comment 4 Oliver Sander 2020-10-15 07:31:28 UTC
That French message is in the file itself.  Uncompress the pdf file using, e.g., podofouncompress, and open it in a text editor.  You will find 

59 0 obj
<<
/Length 1358
>>
stream
if (typeof(this.ADBE) == "undefined")
   this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Mise à jour des formulaires interactifs Adobe";
ADBE.Reader_string_Need_New_Version_Msg = "Ce fichier PDF exige l'utilisation d'une plus récente version d'Adobe Reader. Appuyez sur OK pour télécharger la plus récente version ou communiquez avec votre administrateur système.";
ADBE.Viewer_string_Need_New_Version_Msg_Old = "Ce fichier PDF requiert une version plus récente d'Acrobat. Copiez cette URL et collez-la dans le navigateur, ou contacter l'admin. sys.";
ADBE.Viewer_string_Need_New_Version_Msg = "Ce formulaire PDF requiert une version d'Adobe Acrobat plus récente. Sans cela, le formulaire s'affiche mais risque de ne pas fonctionner correctement. Certains éléments de formulaire risquent de ne pas s'afficher. Cliquez sur OK pour savoir comment obtenir la dernière version d'Adobe Reader.";
ADBE.Viewer_string_Need_New_Version_Msg_Updater = "Ce formulaire PDF requiert une version d'Adobe Acrobat plus récente. Sans cela, le formulaire s'affiche mais risque de ne pas fonctionner correctement. Certains éléments de formulaire risquent de ne pas s'afficher. Si vous disposez d'une connexion Internet, cliquez sur OK pour télécharger et installer la dernière version du produit.";

endstream
endobj

In conclusion, it's the intended behavior, even though it appears weird.
Comment 5 Mihai Sorin Dobrescu 2020-10-15 09:32:42 UTC
OK, thank you!