oss-security - FreeType malformed compressed data issue

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 16 Apr 2009 13:08:34 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com, taviso@...gle.com
Subject: FreeType malformed compressed data issue

I'm processing CVE-2009-0946 for the various integer overflows found by
Tavis Ormandy for FreeType, as captured in:

  https://bugzilla.redhat.com/show_bug.cgi?id=491384

But there's also this commit:

    http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0a05ba257b6ddd87dacf8d54b626e4b360e0a596

This bug doesn't smell exactly like an integer overflow, but there's not
enough immediate context to tell.  Is this a different bug type?  If so,
it needs a new CVE.

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.