<html> <head> <style></style></head> <body class='hmmessage'><div dir='ltr'> <div>vt100's and some xterms have softkeys that can be set with escape codes.</div>Back in the 80's when we had vt100's on pdp11's and vaxen in the office, we sometimes played tricks on each other by reprogramming terminals through escape codes.<div>In theory, if poppler writes raw data from a pdf in an error message, someone could create a pdf that would lead poppler to redefine a function key (or maybe even the "enter" key) to generate a malicious command.</div><div>It is an issue for anyone who runs programs using poppler at a command line.</div><div>William<br><br></div> </div></body> </html>