|
BugTraq
vulnerabilities of postscript printers Jan 22 2004 06:45PM Bob Kryger (bobk panix com) (2 replies) Re: vulnerabilities of postscript printers Jan 23 2004 05:01AM Darren Reed (avalon caligula anu edu au) (6 replies) Re: vulnerabilities of postscript printers Jan 24 2004 02:56AM Glynn Clements (glynn clements virgin net) (1 replies) Re: vulnerabilities of postscript printers Jan 23 2004 07:21PM Elizabeth Zwicky (zwicky greatcircle com) (1 replies) Re: vulnerabilities of postscript printers Jan 23 2004 08:01PM Darren Reed (avalon caligula anu edu au) (1 replies) Re: vulnerabilities of postscript printers Jan 23 2004 06:40PM der Mouse (mouse Rodents Montreal QC CA) Re: vulnerabilities of postscript printers Jan 23 2004 04:15AM der Mouse (mouse Rodents Montreal QC CA) (2 replies) Re: vulnerabilities of postscript printers Jan 27 2004 10:12PM Ian Farquhar - Network Security Group (Ian Farquhar Sun COM) Re: vulnerabilities of postscript printers Jan 24 2004 12:41AM Michael Zimmermann (zim vegaa de) (1 replies) Re: vulnerabilities of postscript printers Jan 24 2004 04:38AM der Mouse (mouse Rodents Montreal QC CA) (1 replies) Re: vulnerabilities of postscript printers Jan 24 2004 09:39AM Michael Zimmermann (zim vegaa de) (1 replies) Re: vulnerabilities of postscript printers Jan 24 2004 05:26PM der Mouse (mouse Rodents Montreal QC CA) |
|
Privacy Statement |
> PostScript has the ability to read/write named files, and nothing
> prohibits an implementation from making peripheral devices or ports
> accessible as named files. E.g. using GhostScript on Linux, the
> following trivial PostScript program sends a WAV file (or the first
> 20kb thereof) to the sound card:
>
> (/dev/dsp) (w) file dup
> (foo.wav) (r) file
> 20000 string readstring pop
> writestring flushfile
>
> [The -dSAFER switch disables file access, and should be used when
> running gs on "untrusted" PostScript files.]
>
Does this mean, that a Postscript-file is not safer than a MS Word
document?
Shouldnt -dSAFER be then the default option? Or breaks this something
else?
--
Georg
[ reply ]