Ubuntu
totem package

  1. Bug #715874
  2. Comment #0

Comment 0 for bug 715874

Revision history for this message
Jamie Strandboge (jdstrand) wrote : should have apparmor profile for gnome-thumbnail-font

Binary package hint: gnome-control-center

Nautilus normally uses gnome-thumbnail-font to provide font previews. Eg:
$ gconftool-2 -g /desktop/gnome/thumbnailers/application@x-font-ttf/enable
true
$ gconftool-2 -g /desktop/gnome/thumbnailers/application@x-font-ttf/command
gnome-thumbnail-font %u %o

If a flaw is discovered in a font library or Gnome and a user navigates to a directory that has a malicious font file, gnome-tumbnail-font could be used to execute arbitrary code, write out to files or leak information. Providing an apparmor profile for gnome-thumbnail-font would be a good step towards proactively protecting the user from this sort of attack.