Bug Fix 1857800
Hi all,
Regarding the latest changelog:
***************
Viewer: Fix a bug that could allow maliciously crafted EPUB files to read data from files on the computer. Thanks to dozernz for discovering this attack vector.
Closes tickets: 1857800
***************
Can anyone clarify this? I was under the impression that EPUB, etc were just benign files with formatting tags. How could an EPUB (via a reader) begin scanning non-related files?
|