Re: xpdf and acrobat reader hole
James Iwanek <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Unique Microcomputer Solutions |
| Message-ID | <[email protected]> |
Jochen Schroeder wrote: > There is a whole in acrobat reader and xpdf which let's you execute any > shell command from within a pdf-dokument. Nice thing if you embed rm -rf > $HOME/* within an pdf-file. Am still not quite sure if this really is a > hole or considered a feature ;-). Anyways here's the relevant link: > http://lists.netsys.com/pipermail/full-disclosure/2003-June/010397.html > > Cheers > Jochen > shame mr `hack4life` is obviously a scriptkiddie ;-) any fool knows you have a more robust hack if you were to replace monkey with $USER ;-) -- Jay -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message