[tex-live] ConTeXt in TL on Windows broken

T T t34www at googlemail.com
Tue Jun 1 16:48:12 CEST 2010


On 1 June 2010 14:42, Philip Taylor (Webmaster, Ret'd)
<P.Taylor at rhul.ac.uk> wrote:
>
>
> Mojca Miklavec wrote:
>
>> (Of course one could argue that the fact that ConTeXt doesn't work on
>> Windows is in fact a security feature as well :)

Oh, c'mon.

> Is Context /really/ that bad/dangerous ?!

If an attacker would place a rogue texlua.exe in the current directory
(not that hard on windows), then you get arbitrary code execution if
you pick up executables from there.  Is that bad enough?

Cheers,

Tomek


More information about the tex-live mailing list