Re: CVE requests: LibTIFF

[Tomas Hoger <thoger () redhat com>]

On Tue, 29 Jun 2010 08:05:25 -0400 Dan Rosenberg wrote:

> On request, I'm re-posting the issues which I think actually deserve
> CVE ids.

I believe the disagreement here is caused by different opinions on what
should be and what does not need to be called security.

> 2.  A NULL pointer derefrence in TIFFVGetField() may result in
> application crash
> (https://bugs.launchpad.net/ubuntu/lucid/+source/tiff/+bug/589145).

This got CVE-2010-2443 from Mitre few days ago.  But I guess you're
going to (or should?) ask for one more for td_stripbytecount case I
pointed out in one of the previous replies (split due to different
fixed-in version).  Sauli's fuzzer to blame for the discovery again ;).

-- 
Tomas Hoger / Red Hat Security Response Team