ietf
[Top] [All Lists]

Re: Plagued by PPTX again

2011-11-16 12:02:51
On 11/15/11 10:26 AM, Frank Ellermann wrote:
On 15 November 2011 18:56, Noel 
Chiappa<jnc(_at_)mercury(_dot_)lcs(_dot_)mit(_dot_)edu>  wrote:

Gee, I don't see my OS listed on that page. What do I do know?
Let DuckDuckGo tell you what it knows about "Powerpoint viewer ubuntu".

FWIW I like ppt(x) better than pdf, "anything pdf" is huge.  For simple
slides (x)html or whatever the "slide" option of xml2rfc produces could
be nice, packaged as "mozilla archive format" or any other style of a
zipped subdirectory.
Many exploits appear in ppt and pptx formats (where pptx reduces scanning complexity). Limiting acceptance (or publishing) to pdf/a is a safer and more stable choice. Documentation formats related to IETF efforts should be stable to ensure documents can be read at a later date.

In May of this year, patches were needed to mitigate ongoing PPT threats.
http://technet.microsoft.com/en-us/security/bulletin/ms11-036
http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html
http://blogs.technet.com/b/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx

OpenOffice permits file system based references as well.

-Doug
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf

<Prev in Thread] Current Thread [Next in Thread>