[ 
https://issues.apache.org/jira/browse/PDFBOX-3331?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15262621#comment-15262621
 ] 

Mayank Agarwal commented on PDFBOX-3331:
----------------------------------------

Thanks for the comments everyone. 

this file does not exist.

C:\windows\sytem32\inetsrv\org\apache\pdfbox\resources\cmap\WinansiEncoding 

We have this is production for last 2-3 years, may be this was happening 
earlier and we just noticed.

> pdfbox trying to access windows folder
> --------------------------------------
>
>                 Key: PDFBOX-3331
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-3331
>             Project: PDFBox
>          Issue Type: Bug
>          Components: .NET
>    Affects Versions: 1.7.0
>         Environment: windows server 2012. Sitecore 7.2
>            Reporter: Mayank Agarwal
>              Labels: security
>         Attachments: pdfboxerror.png
>
>
> For some reason pdfbox is trying to access C:\windows\sytem32\inetsrv   
> folder. 
> We are usinf pdfbox to parse pdf files in our sitecore based CMS website. 
> This folder is locked in production servers, giving access is a security hole.
> Here is what we see in event logs:
> CreateFile    
> C:\windows\sytem32\inetsrv\org\apache\pdfbox\resources\cmap\WinansiEncoding   
>  PATH NOT FOUND Desired Access: Read Attributes
> Let me know if more details are needed.
>  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to