#DeprecateUntrustedPostscript - Twitter Hashtag

over 1 year ago

We modified the PoC to work with LibreOffice/ImageMagick (tested on Fedora 41), which opens gnome-calculator: https://t.co/vkqlfqb2Rs Don't open untrusted office documents on Fedora 40/41 or Debian bullseye!👻🗎 #infosec #DeprecateUntrustedPostscript

0

4

1

0

420

RedTeam Pentesting @RedTeamPT

over 1 year ago

🚨 Another month, another critical Ghostscript RCE, with patches rolling out rather slowly to some distros again 👻😱 #infosec #DeprecateUntrustedPostscript

RedTeam Pentesting @RedTeamPT

about 3 years ago

Did you know you can still exploit CVE-2023-43115 for RCE on a fully patched Fedora 38 with a LibreOffice document?🤯

2

168

50

43

48K

1

11

4

3

3K

Tavis Ormandy

@taviso

almost 8 years ago

This just came up in conversation, did you know Debian refused to enable a valuable security mitigation for over 15 years because it broke UUCP support? It's a true story. Sometimes, you've got to let go of the legacy stuff. https://t.co/7vDFArvzDT #DeprecateUntrustedPostscript

9

133

38

4

0

Tavis Ormandy

@taviso

almost 8 years ago

#DeprecateUntrustedPostscript 😆

Man Yue Mo @mmolgtm

almost 8 years ago

This post gives the details of some type confusions (CVE-2018-19134,19475-76) that I found in Ghostscript after studying reports of similar issues filed by @taviso between 2016 and 2018. The tools used for finding these bugs are open sourced. https://t.co/Tcrm9npdUQ

1

87

32

2

0

9

1

0

Top Tweets for #DeprecateUntrustedPostscript

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users