On Sun, Mar 02, 2008 at 04:11:43PM -0800, Andrew Sackville-West wrote:
 
> The potential hole I see in mutt is not actually a hole in mutt but in
> various helpers used by mutt users. For example, many of us use w3m or
> links or some other text browser to dump html messages to plain text
> for viewing in mutt. A vulnerability in these text browsers could be
> exploited. Maybe some kind of carefully crafted image could cause
> problems with imagemagick which I use to view images from within
> mutt... really any file that you get to through mutt's mailcap is
> dangerous in that it could exploit the vulnerabilities in whatever app
> is used to handle that file.

I see a potential for holes in my setup, because I view pps/ppt files 
with pptview, which is actually a MS app and runs with wine. I think it 
is very unlikely that a pps/ppt file could contain an exploit to 
escalate privileges on a linux machine, but I would prefer to avoid 
this.

Anyone knows a free ppt/pps viewer (no, OOo Impres does *not* qualify as 
a viewer)?

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)

Attachment: signature.asc
Description: Digital signature

Reply via email to