Re: possible gnome-terminal/vte DoS?

On Wed, 2002-09-18 at 13:14, Barry K. Nathan wrote:
> On Tue, Sep 17, 2002 at 08:57:38PM -0400, Havoc Pennington wrote:
> > It's not a DoS, right, unless this can happen as the result of a
> > hostile attacker's actions.
> > 
> > It is certainly a bug.
> 
> Maybe I should have been more explicit -- it can happen as the result of
> a hostile attacker's actions.
> 
> Imagine an attacker with physical access to the keyboard and mouse but
> not to the computer itself (the computer itself is physically secured).

> I would expect that there are other scenarios where this could be used
> as an attack...

What if the box was being used as an LTSP server and one of the users
changed their font size to 12000.

Would this take down the box?  And would it be classed as a DoS?


Rodd
-- 
Redfish Bluefish [Creative]
Phone : 03 9879 5944
Fax   : 03 9879 5833

"I mean heck, it's even got a graphical configurator, so you don't 
 have to use the command line to hose your system anymore."

				-- George (Gnome Developer)