[Libreoffice] [PATCH] security issue: using an un-sanitized string as format of a fprintf
Cédric Bosdonnat
cedric.bosdonnat.ooo at free.fr
Mon Oct 4 01:19:51 PDT 2010
Hi Norbert,
On Sun, 2010-10-03 at 02:02 -0500, Norbert Thiebaud wrote:
> security issue: using an un-sanitized string as format of a fprintf
>
> the argument of fprintf, from aSrsName, come from a command line.
> It can contain %s or any other kind of formatting instruction that
> could be use to do evil things at run-time
Pushed the patch ins libs-gui, thanks for it.
Regards,
--
Cedric
More information about the LibreOffice
mailing list