[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <1248593070.4204.16.camel@localhost>
Date: Sun, 26 Jul 2009 09:24:30 +0200
From: Alex Legler <a3li@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE Request -- HTMLDOC
On Sa, 2009-07-25 at 15:31 +0200, Nico Golde wrote:
> Did you check:
> htmllib.cxx: if (sscanf(line, "%*s%*s%*s%*s%f%*s%*s%s", &width, glyph) != 2)
> ps-pdf.cxx: if (sscanf(line, "%*s%*s%*s%*s%d%*s%*s%s", &width, glyph) != 2)
> as well?
> Looks like a similar issue to me.
>
Indeed it is the same issue. I could cause an overflow with a crafted
AFM font file.
I have added these two to the upstream bug report.
Regards,
Alex
Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
