KDE安全漏洞：PS/PDF file handling vulnerability

eliumao

KDE uses Ghostscript software for processing of PostScript (PS)
        and PDF files in a way that allows for the execution of arbitrary
        commands that can be contained in such files.

        An attacker can prepare a malicious PostScript or PDF file which will
        provide the attacker with access to the victim's account and privileges
        when the victim opens this malicious file for viewing or when the
        victim browses a directory containing such malicious file and has
        file previews enabled.

        An attacker can provide malicious files remotely to a victim in an
        e-mail, as part of a webpage, via an ftp server and possible other
        means.

详情：http://www.kde.org/info/security/advisory-20030409-1.txt
大家不要轻视呀！！！
Very dangerous！！！

黑夜编码人

天天都漏，无处不漏。
天天都补，无处不补。

呵呵

eliumao

其实这对服务器没什么影响。除了象我这样的用FreeBSD+KDE做桌面的倒霉蛋！！！
呵呵！！！

proftpd

偶的服务器也想装KDE喔。

jedi-k

????
不会吧，你在服务器上装KDE
我只在测试用机上装KDE（玩的）

proftpd

怕啥，出来个窗口领导会更高兴！！

jedi-k

晕，昏倒，快来救我！
偶们CTO看到FB上出个窗口，会把我训一顿！

proftpd

你的CTO根本啥都不会。