[Bug 608071] Ghostscript executes random code on startup

http://bugzilla.novell.com/show_bug.cgi?id=608071 http://bugzilla.novell.com/show_bug.cgi?id=608071#c10 Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|WONTFIX | --- Comment #10 from Thomas Biege 2010-05-27 17:17:21 UTC --- Re: Ghostscript 8.64 executes random code at startup (paul.szabo@sydney.edu.au, Wed May 26 04:32:51 2010) Dear Christopher,

Ghostscript_8.64 on openSuSE_11.2 executes all files matching ./Encoding/* on startup. This search is relative to the current directory so it is easy to poison Ghostscript and cause it to execute arbitrary PostScript code without user action or knowledge.

Details: URL:https://bugzilla.novell.com/show_bug.cgi?id=608071

Interesting! So if someone creates /tmp/Encoding then it is dangerous to do cd /tmp; gs any.ps I now used: strace -omylog gs grep '"\./' mylog | sort -u and that shows that gs tries many files in currrent directory, "protection" against just ./Encoding is not enough. Cheers, Paul Szabo psz@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.