vt100's and some xterms have softkeys that can be set with escape codes.Back in 
the 80's when we had vt100's on pdp11's and vaxen in the office, we sometimes 
played tricks on each other by reprogramming terminals through escape codes.In 
theory, if poppler writes raw data from a pdf in an error message, someone 
could create a pdf that would lead poppler to redefine a function key (or maybe 
even the "enter" key) to generate a malicious command.It is an issue for anyone 
who runs programs using poppler at a command line.William

                                          
_______________________________________________
poppler mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/poppler

Reply via email to