oss-security - libfpx Duplicate CVEs (CVE-2011-5232 and CVE-2012-0025)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <50904C01.5070501@gentoo.org>
Date: Tue, 30 Oct 2012 17:52:01 -0400
From: Sean Amoss <ackle@...too.org>
To: cve@...re.org, "Christey, Steven M." <coley@...re.org>
CC: oss-security@...ts.openwall.com, 
 Gentoo Linux Security Team <security@...too.org>
Subject: libfpx Duplicate CVEs (CVE-2011-5232 and CVE-2012-0025)

Steve, MITRE, vendors:

Another possible duplicate CVE assignment below :D

CVE-2011-5232 - Double free vulnerability in the Free_All_Memory
function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the
FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause
a denial of service (crash) via a crafted FPX image.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5232

References to http://secunia.com/advisories/47246

=======================================================================

CVE-2012-0025 - libfpx "Free_All_Memory()" Double-Free Vulnerability

CVE Assignment: http://www.openwall.com/lists/oss-security/2012/01/03/16

References https://secunia.com/advisories/47246 in assignment above


Thanks,
Sean

-- 
Sean Amoss
Gentoo Security | GLSA Coordinator
E-Mail	  : ackle@...too.org
GnuPG FP  : E58A AABD DD2D 03AF 0A7A 2F14 1877 72EC E928 357A


Download attachment "signature.asc" of type "application/pgp-signature" (295 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.