BugTraq
Ghostscript 8.64 executes random code at startup May 22 2010 09:38AM
ne01026 stegny 2a pl (1 replies)
Re: Ghostscript 8.64 executes random code at startup May 26 2010 02:32AM
paul szabo sydney edu au (1 replies)
Dear Christopher,

> Ghostscript_8.64 on openSuSE_11.2 executes all files matching
> ./Encoding/* on startup. This search is relative to the current
> directory so it is easy to poison Ghostscript and cause it to execute
> arbitrary PostScript code without user action or knowledge.
>
> Details: <URL:https://bugzilla.novell.com/show_bug.cgi?id=608071>

Interesting! So if someone creates /tmp/Encoding then it is dangerous
to do
cd /tmp; gs any.ps

I now used:
strace -omylog gs
grep '"\./' mylog | sort -u
and that shows that gs tries many files in currrent directory,
"protection" against just ./Encoding is not enough.

Cheers,

Paul Szabo psz (at) maths.usyd.edu (dot) au [email concealed] http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia

[ reply ]
Re: Ghostscript 8.64 executes random code at startup May 26 2010 09:12AM
Krzysztof Żelechowski (giecrilj stegny 2a pl) (1 replies)
Re: Ghostscript 8.64 executes random code at startup May 26 2010 11:15AM
paul szabo sydney edu au


 

Privacy Statement
Copyright 2010, SecurityFocus