Re: possible gnome-terminal/vte DoS?
Chris Kloiber <[email protected]>
| Newsgroups | gmane.linux.redhat.release.limbo |
|---|---|
| Message-ID | <[email protected]> |
My first guess is it would only affect that user. Others should be ok. Besides, I just tried it and can't get the font higher than about 72 although it says it's 12000. On Tue, 2002-09-17 at 23:34, Rodd Clarkson wrote: > On Wed, 2002-09-18 at 13:14, Barry K. Nathan wrote: > > On Tue, Sep 17, 2002 at 08:57:38PM -0400, Havoc Pennington wrote: > > > It's not a DoS, right, unless this can happen as the result of a > > > hostile attacker's actions. > > > > > > It is certainly a bug. > > > > Maybe I should have been more explicit -- it can happen as the result of > > a hostile attacker's actions. > > > > Imagine an attacker with physical access to the keyboard and mouse but > > not to the computer itself (the computer itself is physically secured). > > > I would expect that there are other scenarios where this could be used > > as an attack... > > What if the box was being used as an LTSP server and one of the users > changed their font size to 12000. > > Would this take down the box? And would it be classed as a DoS? -- Chris Kloiber