Description: This is an enhancement request. I recently had to submit a pdf to a group which first required it be scanned at www.virustotal.com. The pdf could not pass the scan because it contained an open action. The same file passed the scan if converted to pdf from either Abiword or Word. Actual Results: Convert any LO Writer created document to pdf. Will not pass the scan at VirusTotal. Expected Results: Pass the scan at VirusTotal. Reproducible: Always User Profile Reset: No Additional Info: User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:49.0) Gecko/20100101 Firefox/49.0
Normal PDF pass the test (tried with inbuilt dummy text). No idea what you mean with "open action" but a) you have plenty of options to save a PDF, and b) competitors may delete the action. Anyway, it would be good to attach an example file, at best stripped down to the actual issue.
Created attachment 128485 [details] screenshot of not passing the VirusTotal scan If your pdf passed the VirusTotal <https://www.virustotal.com/> scan and mine didn't, then perhaps it had to do with my settings for exporting the pdf. I used the default settings and my scan results are shown in the attached screenshot. My pdf didn't fail but it didn't pass either. As starred and highlighted in pink on the screenshot: "This PDF file contains an open action to be performed when the document is viewed. Malicious PDF documents with JavaScript very often use open actions to launch the JavaScript without user interaction." I can use the exact same file to create a pdf in either Abiword or Word and those give me a green pass with no open action warning. What export-to-pdf settings did you use to pass the VirusTotal scan?
(In reply to leigh.tate from comment #2) > What export-to-pdf settings did you use to pass the VirusTotal scan? I used the default: JPEG compression 90%, 150dpi PDF form FDF, bookmarks, placeholders (everything else off) (document had no formatting, no fields, no variables etc., just the dummy text) Better you attach a document, either odt or pdf.
Created attachment 128491 [details] PDF that didn't pass the scan Attached is the pdf that gave the results in the previous screenshot.
Tried with a ToC and with links to external resources, nothing leads to a problem at virustotal. And when I run the test with your file it neither complains. Let's see if the experts have an idea -> NEW.
PDF export can vary from application to application. IMO a simple NotOurBug. But if we would want to look at details, then the specific file is needed.
Dear Bug Submitter, This bug has been in NEEDINFO status with no change for at least 6 months. Please provide the requested information as soon as possible and mark the bug as UNCONFIRMED. Due to regular bug tracker maintenance, if the bug is still in NEEDINFO status with no change in 30 days the QA team will close the bug as INSUFFICIENTDATA due to lack of needed information. For more information about our NEEDINFO policy please read the wiki located here: https://wiki.documentfoundation.org/QA/Bugzilla/Fields/Status/NEEDINFO If you have already provided the requested information, please mark the bug as UNCONFIRMED so that the QA team knows that the bug is ready to be confirmed. Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-NeedInfo-Ping-20170531
Thank you for reporting the bug. Please attach the original document used to create the PDF document, as this makes it easier for us to verify the bug. I have set the bug's status to 'NEEDINFO'. Please change it back to 'UNCONFIRMED' once the requested document is provided. (Please note that the attachment will be public, remove any sensitive information before attaching it. See https://wiki.documentfoundation.org/QA/FAQ#How_can_I_eliminate_confidential_data_from_a_sample_document.3F for help on how to do so.)
Created attachment 133821 [details] Excerpt from original document causing the problem The original odt text is for an eBook which size exceeds Bugzilla's file size limit. This is one of the four sections with photos removed to meet that requirement.
Dear Bug Submitter, This bug has been in NEEDINFO status with no change for at least 6 months. Please provide the requested information as soon as possible and mark the bug as UNCONFIRMED. Due to regular bug tracker maintenance, if the bug is still in NEEDINFO status with no change in 30 days the QA team will close the bug as INSUFFICIENTDATA due to lack of needed information. For more information about our NEEDINFO policy please read the wiki located here: https://wiki.documentfoundation.org/QA/Bugzilla/Fields/Status/NEEDINFO If you have already provided the requested information, please mark the bug as UNCONFIRMED so that the QA team knows that the bug is ready to be confirmed. Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-NeedInfo-Ping-20171204
(In reply to leigh.tate from comment #9) > Created attachment 133821 [details] > Excerpt from original document causing the problem > > The original odt text is for an eBook which size exceeds Bugzilla's file > size limit. This is one of the four sections with photos removed to meet > that requirement. I got "No engines detected this file". Settings are the default, because I had reset my profile. Are you really still getting results with Virustotal? It might be that some scanners fixed their heuristics or false positives. Arch Linux 64-bit Version: 6.1.0.0.alpha0+ Build ID: b2d87e00ed93db79ba64a9bef83e20d44c69dd7c CPU threads: 8; OS: Linux 4.14; UI render: default; VCL: kde4; Locale: fi-FI (fi_FI.UTF-8); Calc: group threaded Built on December 18th 2017
Title was misleading. There's no "virus" and count is 0. This document exported to PDF passes. "Details" gives a warning for PDF: "Contains an open action to be performed when the document is viewed." I guess it's bookmarks like in https://helpx.adobe.com/acrobat/using/applying-actions-scripts-pdfs.html. I close the bug.