Re: CVE Request - LibModPlug <=0.8.8.4 multiple heap overflow

[Kurt Seifried <kseifried () redhat com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/07/2013 10:24 AM, Florian wrote:
> Hi,
>
> Just a CVE Request for this 
> http://blog.scrt.ch/2013/07/24/vlc-abc-parsing-seems-to-be-a-ctf-challenge/
>
>  Thx

I need a better request. You want one CVE? multiple CVEs? A quick read
of the web page indicates multiple different problems. Can you list
them here and provide links to the source code? thanks.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
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=LoaB
-----END PGP SIGNATURE-----