oss-security - CVE Request: VLC: Potential divide-by-zero issue

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <HK2PR04MB070661404763CA3B45FF7C219CC90@HK2PR04MB0706.apcprd04.prod.outlook.com>
Date: Thu, 22 Sep 2016 07:12:32 +0000
From: ajax secure <ajax4sec@...mail.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
CC: "cve-assign@...re.org" <cve-assign@...re.org>
Subject: CVE Request: VLC: Potential divide-by-zero issue

Hi

Xiangkun Jia has discovered a divide-by-zero in VLC, which makes the application crashed and may be caused by buffer overflow. The fix is in

http://git.videolan.org/?p=vlc/vlc-2.2.git;a=commit;h=85a64e10d665edf8a29526543b5c6fd4923437fd

Can you assign a CVE for this issue? Thank you.

Regards,
Xiangkun Jia
Institute of Software, Chinese Academy of Sciences

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.