oss-sec mailing list archives
CVE Request: arj: free on invalid pointer due to to buffer overflow
From: Salvatore Bonaccorso <carnil () debian org>
Date: Sat, 28 Mar 2015 08:51:39 +0100
Hi Jakub Wilk reported arj crashing on a ARJ file in [1]. Guillem Jover pointed out that the nvalid pointer is due to a buffer overflow write access initiated by a value which is under user control, see [2]. He prepared as well a patch for this issue[3]. Could assing a CVE for this issue? [1] https://bugs.debian.org/774015 [2] https://bugs.debian.org/774015#11 [3] http://git.hadrons.org/gitweb/?p=debian/pkgs/arj.git;a=blob_plain;f=debian/patches/security-afl.patch Regards, Salvatore
Current thread:
- CVE Request: arj: free on invalid pointer due to to buffer overflow Salvatore Bonaccorso (Mar 28)
- Re: CVE Request: arj: free on invalid pointer due to to buffer overflow cve-assign (Mar 28)