Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netsc

看板Bugtraq作者時間18年前 (2007/10/10 04:55), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串9/9 (看更多)
SSB0aGluayB0aGF0IHlvdSdyZSBib3RoIHJpZ2h0LCBidXQgdGhlIG9ubHkgc29sdXRpb24gaXMg dGhlIHNhbWUgb2xkLCBzYW1lIG9sZDogc3BlZWQsIGNvZGUgc2l6ZSwgYW5kIG1haW50YWluYWJp bGl0eS9jb21wbGV4aXR5IHZlcnN1cyB0aGUgcGFkZGluZyBhbmQgYWRkZWQgSU8gY2hlY2tpbmcg b2YgYSB2ZXJ5IHNlY3VyZSBhcHAuICBOb3RoaW5nIG5ldywgbm90aGluZyBkaWZmZXJlbnQuICBJ dCdzIHRoZSBzYW1lIHByb2JsZW0gdGhhdCBoYXMgZXhpc3RlZCBzaW5jZSB0aGUgZGF3biBvZiBw cm9ncmFtbWluZy4gIAoKSW52YXJpYWJseSB0aGUgYW5zd2VyIHRvIHRoZSBxdWVzdGlvbiB3aWxs IGJlIGEgcHJvcG9zYWwgZm9yIHlldCBhbm90aGVyIHNlY3VyZSBwcm9ncmFtbWluZyBsYW5ndWFn ZSBvciBmcmFtZXdvcmsuICBTbyBmYXIgYWxsIGF0dGVtcHRzIGF0IGVpdGhlciBoYXZlIHNlZW1l ZCB0byBoYXZlIGZhaWxlZCBtaXNlcmFibHkgb3IgbmV2ZXIgcmVhbGx5IGdhaW5lZCB0cmFjdGlv biAoYW55b25lIGVsc2UgaGVyZSByZW1lbWJlciBwbGFuIDkgYW5kIGl0cyBtb3JlIHNlY3VyZSBi cm90aGVyIGluZmVybm8/KS4gIE5vdyB0aGUgaW5kdXN0cnkgdHJlbmQgZHUgam91ciBpcyBtb3Zp bmcgbW9yZSB0b3dhcmRzIHByb3RlY3RpbmcgdGhlIHJlc3Qgb2YgdGhlIHN5c3RlbSBmcm9tIHVu Zm9yZXNlZWFibGUgdnVsbmVyYWJpbGl0aWVzIGFuZCB0aGVpciBleHBsb2l0YXRpb24gKHNlbGlu dXgsIGRlcCwgZXRjKSB3aGVuIHRoaW5ncyBibG93IHVwIHJhdGhlciB0aGFuIGRlbWFuZCB0aGF0 IGNvZGUgaXMgMTAwJSBidWxsZXRwcm9vZi4gIAoKQmFkIGlkZWE/ICBJJ20gbm90IHNvIHN1cmUu ICBUaGUgYmlnZ2VyIHRoZSBzeXN0ZW0sIGludmFyaWFibHksIHRoZSBoYXJkZXIgdG8gZGVidWcg dG8gYWJzb2x1dGUgc3RhYmlsaXR5IGluIGEgdGltZWx5IGZhc2hpb24sIGJ1dCBzb3VyY2UgY29k ZSBhbmFseXNpcyB0b29scyBjYW4gaGVscCBsaWdodGVuIHRoZSBsb2FkIGEgYml0LiAgSG93ZXZl ciwgbm8gYW1vdW50IG9mIGF1ZGl0aW5nIG9mIHlvdXIgb3duIHByb2R1Y3QgY2FuIHByZXZlbnQg dGhlIHByb2JsZW0gb2YgYSBidWdneSB0aGlyZCBwYXJ0eSB0aGF0LCBldmVuIGlmIHlvdSBwYXNz IGl0IGlucHV0IGluIHRoZSBleGFjdCBmYXNoaW9uIGFzIHNwZWNpZmllZCBieSB0aGUgbWFudWZh Y3R1cmUsIGlzIHN0aWxsIHZ1bG5lcmFibGUuICBUaGUgcG9pbnQgb2YgdGhpcyByYW1ibGluZz8g Tm8gYW1vdW50IG9mIGh5cGVydmVudGFsYXRpbmcgb3ZlciB0aGUgc2VjdXJpdHkgb2YgeW91ciBv d24gY29kZSB3aWxsIGV2ZXIgbWFrZSBpdCBhYnNvbHV0ZWx5IHNlY3VyZSBhcyBsb25nIGFzIHlv dSdyZSBwbGFjaW5nIGEgcmVsaWFuY2Ugb24gdGhlIHNlY3VyaXR5IG9mIGEgM3JkIHBhcnR5IGxp YnJhcnkgKGluIHdoaWNoIGNhc2UgSSBob3BlIHlvdSdyZSBwbGFubmluZyB0byB3cml0ZSBldmVy eXRoaW5nIGZyb20gdGhlIGJpb3Mgb2YgdGhlIGNvbXB1dGVyIHVwIHRvIHRoZSBhcHApLgoKUG9p bnQ/ICBNaXRpZ2F0aW5nIHRoZSB0aHJlYXQgcG9zZWQgYnkgdW5rbm93biBhdHRhY2sgdmVjdG9y cyBpcyBzb21ldGhpbmcgdGhhdCBtYXkgc3RhcnQgYXQgdGhlIHByb2dyYW0gbGV2ZWwsIGJ1dCBJ J20gaGlnaGx5IGRvdWJ0ZnVsIHRoYXQgaXQgY2FuIGNvbXBsZXRlbHkgYmUgYWNjb21wbGlzaGVk IGF0IGp1c3QgdGhlIHByb2dyYW0gbGV2ZWwgYWxvbmUuICBBIHNlY3VyZSBvcGVyYXRpbmcgc3lz dGVtIG9yIHNlY3VyaXR5IGZyYW1ld29yayB3aWxsIHByZXR0eSBtdWNoIGFsd2F5cyBiZSBhIG5l Y2Vzc2l0eSBmb3IgZ3VhcmFudGVlaW5nIGEgY29tcGxldGVseSBzZWN1cmUgcGxhdGZvcm0uICAK CklmIHRoZXJlJ3MgYSBzaWx2ZXIgbGluaW5nIGhlcmUgaXQncyB0aGF0IGV2ZW4gdGhlIG1vc3Qg bm92aWNlIGNvbXB1dGVyIHVzZXIga25vd3MgdGhhdCBzZWN1cml0eSBpcyBhIHByb2JsZW0gd2l0 aCBjb21wdXRlcnMgYXMgb3Bwb3NlZCB0byAic2VjdXJpdHk/IFdoYXQncyB0aGF0PyIgKGZvbGxv d2VkIGJ5IGEgZGVlciBpbiB0aGUgaGVhZGxpZ2h0cyBsb29rKS4gIFRoYXQgd2lkZXNwcmVhZCBr bm93bGVkZ2UgaXMgd2hhdCBkcml2ZXMgYnVkZ2V0cyB0byBzcGVuZCBvbiBzZWN1cml0eSBvcmll bnRlZCBwcm9kdWN0cyByYXRoZXIgdGhhbiB0aGUgb2xkIHBoaWxvc29waHkgdGhhdCB0aG9zZSBh cmUgb3B0aW9uYWwgcHJvZHVjdHMuICBIb3BlZnVsbHksIHRoYXQgd2lsbCBldmVudHVhbGx5IG1h dGVyaWFsaXplIGluIHRoZSBmb3JtIG9mIGJldHRlciwgY2hlYXBlciBzb3VyY2UgY29kZSBhdWRp dGluZyBwcm9kdWN0cyB0aGF0IGNhbiBoZWxwIGZpeCB0aGUgcHJvYmxlbSBhdCB3aGVyZSBpdCBh bGwgc3RhcnRzOiBpbnNlY3VyZSBjb2RlIGNyZWF0ZWQgYnkgaW5ub2NlbnQgb3ZlcnNpZ2h0IG9m IHRoZSBwcm9ncmFtbWVyIHdobyBjcmVhdGVzIGl0IHRocm91Z2ggZWl0aGVyIGl0IGJlaW5nIGFi b2x1dGVseSBjb21wbGV4LCBhIHJ1c2hlZCBkZXZlbG9wbWVudCBjeWNsZSwgb3IgbWF5YmUganVz dCB0aGUgaW5mYW1vdXMgKCJ0aGF0IGxvb2tzIHJpZ2h0IikuIAoKR2VvZmYKCgoKIA0KU2VudCBm cm9tIG15IEJsYWNrQmVycnkgd2lyZWxlc3MgaGFuZGhlbGQuDQoNCi0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiAiR2VvLiIgPGdlb2luY2lkZW50c0BubHMubmV0Pg0KDQpEYXRlOiBT dW4sIDcgT2N0IDIwMDcgMjI6MjY6MjEgDQpUbzo8YnVndHJhcUBzZWN1cml0eWZvY3VzLmNvbT4s PGZ1bGwtZGlzY2xvc3VyZUBsaXN0cy5ncm9rLm9yZy51az4NClN1YmplY3Q6IFJlOiBbRnVsbC1k aXNjbG9zdXJlXSBVUkkgaGFuZGxpbmcgd29lcyBpbiBBY3JvYmF0IFJlYWRlciwgTmV0c2NhcGUs DQoJTWlyYW5kYSwgU2t5cGUNCg0KDQotLS0tLSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tDQpGcm9t OiA8VmFsZGlzLktsZXRuaWVrc0B2dC5lZHU+DQoNCj4+IDIpIFRoYXQgc2FpZCBwcm9ncmFtIGNh biBwcm90ZWN0IGl0c2VsZiBhZ2FpbnN0IG92ZXJ0bHkgbWFsaWNpb3VzIGlucHV0Lg0KDQpPayB0 aGVuLCBJIGNhbiBtYXJrIHlvdSBkb3duIGFzIG9uZSB3aG8gYmVsaWV2ZXMgdGhhdCBhbGwgdGhl IHBocCBleHBsb2l0cw0KYmxhbWVkIG9uIGJhZCBjb2RlIHdyaXRpbmcgYXJlIGFjdHVhbGx5IHRo ZSBmYXVsdCBvZiBwaHAgYW5kIG5vdCB0aGUNCmFwcGxpY2F0aW9uIGNvZGVkIHVzaW5nIGl0J3Mg cG93ZXJmdWwgZnVuY3Rpb25hbGl0eT8NCg0KR2VvLg0KDQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KRnVsbC1EaXNjbG9zdXJlIC0gV2UgYmVsaWV2ZSBp biBpdC4NCkNoYXJ0ZXI6IGh0dHA6Ly9saXN0cy5ncm9rLm9yZy51ay9mdWxsLWRpc2Nsb3N1cmUt Y2hhcnRlci5odG1sDQpIb3N0ZWQgYW5kIHNwb25zb3JlZCBieSBTZWN1bmlhIC0gaHR0cDovL3Nl Y3VuaWEuY29tLw0K
文章代碼(AID): #172-hG00 (Bugtraq)
討論串 (同標題文章)
完整討論串 (本文為第 9 之 9 篇):
文章代碼(AID): #172-hG00 (Bugtraq)