4 ms·
File formats like PDF contain a script that must be interpreted in order to read the image.
by mdavidn 5y ago
File formats like PDF contain a script that must be interpreted in order to read the image.
- sushsjsuauahab 5y agoThat sounds like a pdf problem ^.^
- spijdar 5y agoPDF is an example, but far from the only one. Many file types have executable/scripted portions or simply very complex file formats that have huge attack surfaces. JPEG XL predictors are Turing complete, given an unlimited image size... Off the top of my head, a lot of old console exploits on the Wii and GameCube revolved feeding malicious save files to games. Same idea, missing bounds checks or whatever when deserializing some field lets you shell the process. Parsing random files from users is just dangerous.
- Hamuko 5y agoSome say the P in PDF stands for Problem.