2 ms·
If allows an attacker to execute arbitrary code in a situation where you wouldn't expect that (such as merely CDing to an attacker-controlled directory), then y
by Ajedi32 10y ago
If allows an attacker to execute arbitrary code in a situation where you wouldn't expect that (such as merely CDing to an attacker-controlled directory), then yeah of course it's a vulnerability.
- caf 10y agoYes, this is more like the "a PDF that runs arbitrary commands when you open it" class.