[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#311997: ITP: gaim-latex -- gaim plugin wich translate LaTeX code into image in conversation



Nicolas Schoonbroodt wrote:

> chdir("/tmp")
> system("latex -interaction=nonstopmode " FILE_TEX)
> system("dvips -o" FILE_PS " -E " FILE_DVI)
> system("convert " FILE_PS " " FILE_PNG)
> 
> and finaly a I do a
> system("rm -rf /tmp/GaimTeX.*") somewhere

This is still a security problem, this time from local users: A standard
symlink attack.



Reply to: