oss-sec mailing list archives

Re: strings / libbfd crasher

From: Dave Rutherford <dave () evilpettingzoo com>
Date: Thu, 23 Oct 2014 12:23:14 -0400

On Thu, Oct 23, 2014 at 11:24 AM, Michal Zalewski <lcamtuf () coredump cx> wrote:

http://lcamtuf.coredump.cx/stringme


Clicking 'Save Link As...' in Chromium 37.0.2062.120 Ubuntu 14.04 (281580)
crashes the browser, though chromium does not seem to link against libbfd.
Firefox does not appear to be vulnerable.

Current thread:

strings / libbfd crasher Hanno Böck (Oct 23)
- Re: strings / libbfd crasher Michal Zalewski (Oct 23)
  - Re: strings / libbfd crasher Dave Rutherford (Oct 23)
  - Re: strings / libbfd crasher mancha (Oct 23)
    - Re: strings / libbfd crasher mancha (Oct 24)
    - Re: strings / libbfd crasher Hanno Böck (Oct 24)
    - Re: strings / libbfd crasher Michal Zalewski (Oct 24)
    - Re: strings / libbfd crasher Michal Zalewski (Oct 24)
    - Re: strings / libbfd crasher Hanno Böck (Oct 24)
    - Re: strings / libbfd crasher Michal Zalewski (Oct 24)
    - Re: strings / libbfd crasher Tavis Ormandy (Oct 24)
    - Re: strings / libbfd crasher mancha (Oct 24)
- Re: strings / libbfd crasher cve-assign (Oct 26)

(Thread continues...)