oss-security - Re: CVE request: libpoppler4: buffer overflow in the Abiword backend

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <876718311.335541257987932605.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Wed, 11 Nov 2009 20:05:32 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: libpoppler4: buffer overflow in the
 Abiword backend

----- "Thomas Biege" <thomas@...e.de> wrote:
> 
> Hello everybody,
> 
> does this need an CVE-ID?
> 
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534680
> 

I presume this does need a CVE id, but seeing as PDF related bugs are often a
Pandora's Box, I'd rather not assign one just yet. Has someone looked at this
to see what the root of the problem is?

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.