3 ms·
They were talking about JBIG2, not PDF. JBIG2 has been in the news periodically for a different sort of problem - you can't trust it to accurately represent wh
by _jal 5y ago
They were talking about JBIG2, not PDF.
JBIG2 has been in the news periodically for a different sort of problem - you can't trust it to accurately represent what was scanned:
https://www.theregister.com/2013/08/06/xerox_copier_flaw_means_dodgy_numbers_and_dangerous_designs/ https://www.theregister.com/2013/08/06/xerox_copier_flaw_mea...
- whizzter 5y agoThe NSO exploit started by pretending to send a GIF, that was sent down to some decoder that did automatic file-type detection based on data rather than filetype and "correctly" detected an PDF, the Apple PDF decoder in turn supports JBIG2 images where the actual exploit lives.