Bugtraq mailing list archives

Ghostscript 8.64 executes random code at startup


From: ne01026 () stegny 2a pl
Date: 22 May 2010 09:38:56 -0000

Ghostscript_8.64 on openSuSE_11.2 executes all files matching ./Encoding/* on startup.  This search is relative to the 
current directory so it is easy to poison Ghostscript and cause it to execute arbitrary PostScript code without user 
action or knowledge.

Details: <URL:https://bugzilla.novell.com/show_bug.cgi?id=608071>


Current thread: