Re: gdk-pixbuf external conversion?

[Owen Taylor <otaylor redhat com>]

Lauris Kaplinski <lauris@kaplinski.com> writes:

> On 17 Jun 2000, Owen Taylor wrote:
> 
> > This is as much a problem for external processes as shared processes
> > and using convert or netpbm suddenly broadens the range of code that
> > might be vulnerable.
> 
> Not being expert, but how could forked process compromise its 
> parent, if parent is done The Right Way? Isn't in such case EVERY program
> security risk?

It's not a question of the forked process compromising the parent.
It's just a question of the forked process executing rm -rf /home
when your mail reader displays the image in some mail...

Regards,
                                        Owen