oss-security - Re: CVE request: libpoppler4: buffer overflow in the Abiword backend

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Wed, 18 Nov 2009 13:25:43 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: libpoppler4: buffer overflow in the
 Abiword backend

----- "Thomas Biege" <thomas@...e.de> wrote:
> 
> Our maintainer told me that version 3 and 5 are vulnerable too.
> 

As an FYI, MITRE assigned this CVE-2009-3938.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.