Re: CVE-2017-8291 ghostscript remote code execution

[redrain root <rootredrain () gmail com>]

what a awkward??
I have discovered a part of my vulns about ghostscript last year and
exploited in fulldisclosure early!
and these vulns are part of mine I was going to discovered these in defcon
or other conference...WTF...
u guys are logo designer???

there are two demos last year
Evince Arbitrary Code Execution https://youtu.be/wzcrHXngfcM Attack Imagick
through Ghostscript https://youtu.be/tPGm_ANDyOw


Regards,
redrain



2017-04-28 19:37 GMT+08:00 David Black <dblack () atlassian com>:

> On Friday, 28 April 2017, Kurt H Maier <khm () sciops net> wrote:
>
> > On Fri, Apr 28, 2017 at 01:50:04AM -0000, security () atlassian com
> > <javascript:;> wrote:
> >
> >
> > Why are you sending user-tracking urls to this list?
> Hi Kurt,
> We did not intend to send user tracking urls to this list. However, the
> method we used to send the email resulted in sendgrid rewriting the the
> links. We apologise regardless.
>
>
> --
> David.
>
>
> --
> David Black / Security Engineer.