oss-sec mailing list archives

Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer

From: Huzaifa Sidhpurwala <huzaifas () redhat com>
Date: Thu, 19 Jul 2012 21:44:37 +0530

On 07/19/2012 08:58 PM, Henri Salo wrote:


Do you know which versions are affected?


I know that 3.9.x upto the latest 4.0.2 are affected.
Older versions may be affected as well, i am not sure
about that.



-- 
Huzaifa Sidhpurwala / Red Hat Security Response Team

Current thread:

tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer Huzaifa Sidhpurwala (Jul 18)
- Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer Henri Salo (Jul 19)
  - Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer Huzaifa Sidhpurwala (Jul 19)
- Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer Solar Designer (Sep 22)
  - CVE Request: libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression Huzaifa Sidhpurwala (Sep 25)
    - Re: CVE Request: libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression Kurt Seifried (Sep 25)
    - Re: CVE Request: libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression Sebastian Krahmer (Sep 25)
    - Re: CVE Request: libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression Huzaifa Sidhpurwala (Sep 26)
    - Re: CVE Request: libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression Tom Lane (Sep 26)