Re: Ghostscript 8.64 executes random code at startup

From: paul.szabo@sydney.edu.au
To: giecrilj@stegny.2a.pl
Cc: bugtraq@securityfocus.com,ne01026@stegny.2a.pl
Subject: Re: Ghostscript 8.64 executes random code at startup
Date:


Dear Krzysztof,

>> ... it is dangerous to do
>>   cd /tmp; gs any.ps
>
> What is in the file "any.ps"?
> You are exposed ... without feeding *anything* to Ghostscript ...

Yes, precisely: that is why I called it any.ps.

Cheers, Paul

Paul Szabo   psz@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia





Copyright © 1995-2018 LinuxRocket.net. All rights reserved.