No, I don't think it can run "rm -rf /", because the executable name can't have spaces in it (so you can't pass arguments to shell commands).
But what a malicious person CAN do is remotely mount a disk image which contains a script with no spaces in it's name which calls "rm -rf /", which is in turn executed by this flaw.
More complicated, but the same sad result :)
| Year | Number of comments posted |
|---|---|
| 2004 | 2 |
Total: 2 comments. View all these comments on a single page.
The most recent 20 comments posted to Making Light by Chris Burkhardt:
Show all comments by Chris Burkhardt.