Encapsulated PostScript
(→Links: new site) |
(→Links) |
||
| Line 58: | Line 58: | ||
* [https://www.fireeye.com/blog/threat-research/2015/12/the_eps_awakens.html FireEye blog post about vulnerability in Microsoft's EPS implementation in 2015] (and [https://www.fireeye.com/blog/threat-research/2015/12/the-eps-awakens-part-two.html part 2]) | * [https://www.fireeye.com/blog/threat-research/2015/12/the_eps_awakens.html FireEye blog post about vulnerability in Microsoft's EPS implementation in 2015] (and [https://www.fireeye.com/blog/threat-research/2015/12/the-eps-awakens-part-two.html part 2]) | ||
* [https://forensicswiki.xyz/wiki/index.php?title=Encapsulated_PostScript_(EPS) ForensicsWiki entry] (all information already copied over) | * [https://forensicswiki.xyz/wiki/index.php?title=Encapsulated_PostScript_(EPS) ForensicsWiki entry] (all information already copied over) | ||
| + | * [https://support.apple.com/en-us/HT213250 Apple dropping support in MacOS Ventura] | ||
[[Category:Adobe]] | [[Category:Adobe]] | ||
[[Category:TIFF]] | [[Category:TIFF]] | ||
Revision as of 20:38, 4 November 2022
Encapsulated PostScript (EPS) is a format based on PostScript, designed to be more like an image format than a page description language.Contents |
Formats
An EPS file may contain a "preview" version of the image, intended to be used, for example, by document editors when displaying the image on the screen. This has a surprisingly large effect on the format. The varieties of EPS are best categorized based on the type of preview image.
Also, be aware that some image viewers may display only the preview image, instead of the full-quality main image.
No preview
We'll call an EPS file with no preview image a "plain EPS" file, to distinguish it from the other EPS varieties.
Plain EPS is a subformat of PostScript. It is a plain text file.
EPSI
EPSI (Encapsulated PostScript Interchange) is the same as plain EPS, except that it has a preview image inside it. The preview uses a simple raster image format. EPSI format can be identified by the presence of a line beginning with "%%BeginPreview".
PICT preview
This variety is only relevant to the Macintosh platform. It contains a PICT file in the Resource Fork, and a plain EPS file in the data fork.
TIFF/WMF preview
This is a wrapper format containing an embedded TIFF or WMF file, and an embedded plain EPS file. It is sometimes called DOS EPS Binary. It begins with a 30-byte or a 32-byte binary header. In most cases then the EPS text comes and finally the preview image. For the variant with the TIFF preview image sometimes the file extension ept is used.
Identification
Files with a TIFF or WMF preview image begin with signature bytes C5 D0 D3 C6.
All other EPS formats begin with ASCII text "%!PS-Adobe-x.x EPSF-x.x" (where each x is a single digit).
Specifications
Software
- Ghostscript: A free PostScript interpreter
- Ghostview and GSview: Viewers based on Ghostscript
- ImageMagick (requires Ghostscript)
- XnView (requires Ghostscript)
- EPS Viewer
- CorelDRAW
Sample files
- http://aminet.net/pix/eps
- http://cd.textfiles.com/dtpfmwaves/
- https://example-files.online-convert.com/vector%20image/eps/example.eps
- http://file.fyicenter.com/b/sample.eps
- https://telparia.com/fileFormatSamples/image/eps/
References
- Die PostScript- Acrobat-Bibel by Thomas Merz, 1996, ISBN 3-9804943-0-6
- Information about '.ept' on File-Extensions.org
Links
- Wikipedia article
- Encapsulated PostScript File Format Summary, from the Encyclopedia of Graphics File Formats
- FireEye blog post about vulnerability in Microsoft's EPS implementation in 2015 (and part 2)
- ForensicsWiki entry (all information already copied over)
- Apple dropping support in MacOS Ventura
