Ghostscript 8.64 executes random code at startup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ghostscript_8.64 on openSuSE_11.2 executes all files matching ./Encoding/* on startup.  This search is relative to the current directory so it is easy to poison Ghostscript and cause it to execute arbitrary PostScript code without user action or knowledge.

Details: <URL:https://bugzilla.novell.com/show_bug.cgi?id=608071>


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux