[tex-live] Recent poppler vulnerabilities?

Alexander Cherepanov cherepan at mccme.ru
Sat Oct 24 19:28:15 CEST 2009


Hi Martin!
On Sat, 24 Oct 2009 17:18:04 +0200, Martin Schröder <martin at oneiros.de> wrote:

>> Wild guess: is poppler involved when you do
>> \includegraphics{input.pdf} in pdflatex?

> Yes. Or XPDF. But there the program only parses PDFs. 

What do you mean? That the program does only high level parsing 
without digging into inner details?

> Hard to exploit and most likely the program will simply crash.

Well, that's slippery slop.

Alexander Cherepanov




More information about the tex-live mailing list