Hello Stefan,

On Fri, 14 Oct 2022, at 20:32:20 [GMT +0300] (which was 19:32 where I
live) Stefan wrote:

>> Automatic viewers for PDF, DOC, XLS etc.? Really?

> The files are converted by the built-in converter into HTML and
> displayed in the HTML viewer, actually. No scripts execution and
> other unsafe stuff. Do you still see anything to worry security wise?

Who at Ritlabs is running automated tests with attachments to check 
converters on buffer-overflows, Use After Free issues and other bugs? 
Any Security Auditing of such new features? If all is done in a so  
called "Sandbox" thet can be evaded.
I am sure that malicious senders are able create broken/special 
attachments causing a severe security hole. 

And in these bad times we are all much more concerned having no 
insecure programs being attacked by chinese, russian services and 
intruders.

-- 
Regards
Gwen

Using The Bat! Version 10.2.1.2 (32-bit) on Windows 11 10.0 (Build 22000 )

Attachment: pgpR1mnGv4CH0.pgp
Description: PGP signature

________________________________________________________
'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to