oss-sec mailing list archives

Re: CVE request: out-of-bounds memory access flaw in unrtf

From: Hanno Böck <hanno () hboeck de>
Date: Thu, 4 Dec 2014 21:23:16 +0100

On Thu, 4 Dec 2014 20:32:25 +0100
Fabian Keil <freebsd-listen () fabiankeil de> wrote:

Potential fixes:
http://www.fabiankeil.de/sourcecode/unrtf-0.21.5-various-fixes.diff


Thanks, it's just that it doesn't help much (see attachment, all
crashes with your patch applied).

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: unrtf-crashes-new.tar.xz
Description:

Attachment: _bin
Description: OpenPGP digital signature

Current thread:

CVE request: out-of-bounds memory access flaw in unrtf Vincent Danen (Dec 03)
- Re: CVE request: out-of-bounds memory access flaw in unrtf Hanno Böck (Dec 03)
  - Re: CVE request: out-of-bounds memory access flaw in unrtf Michal Zalewski (Dec 03)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Vincent Danen (Dec 04)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Fabian Keil (Dec 04)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Hanno Böck (Dec 04)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Fabian Keil (Dec 05)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Hanno Böck (Dec 08)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Alexander Cherepanov (Dec 11)
    - Re: CVE request: out-of-bounds memory access flaw in unrtf Hanno Böck (Dec 21)
- Re: CVE request: out-of-bounds memory access flaw in unrtf cve-assign (Dec 04)