Apache PDFBox Hits 2.0 (sdtimes.com)
mmoorebz writes: After three years of development and with over 150 contributors to the code, Apache PDFBox 2.0 has been released. With this release comes enhancements and improvements. The Apache PDFBox library is an open-source Java tool for working with PDF documents. The project allows creation and manipulation of PDF documents, and the ability to extract content from them. Support for forms in open-source PDF viewers is currently disappointing, and I hope this heralds improvement on that front.
... on top of a runtime also commonly used as a vector for malware.
Which of the other runtimes are not commonly used as a vector for malware? Other PDF software has been implemented using e.g. native code and JavaScript, both of which are used as vectors for malware. Probably even more than Java, actually.