Re: update on CVE-2008-5718

["Steven M. Christey" <coley () linus mitre org>]

On Wed, 28 Jan 2009, Thomas Biege wrote:

> I was thinking about that case too but it might not work because we escape
> the space.

This would limit the impact to whatever a single command-line switch can
do for whatever command is being invoked.  Probably some programs accept a
"-stdin" switch and thus would hang forever waiting to read input, as an
example.

- Steve