New User, Welcome!     Login

Ghostscript 8.64 executes random code at startup



From: ne01026 stegny 2a pl
To: bugtraq securityfocus com
Cc:
Subject: Ghostscript 8.64 executes random code at startup
Date: Sat - May 22, 2010 02:56 AM


Ghostscript_8.64 on openSuSE_11.2 executes all files matching ./Encoding/* on startup.  This search is relative to the current directory so it is easy to poison Ghostscript and cause it to execute arbitrary PostScript code without user action or knowledge.

Details: <URL:https://bugzilla.novell.com/show_bug.cgi?id=608071>




Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!