[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.64.1211021328260.556@faron.mitre.org>
Date: Fri, 2 Nov 2012 13:31:27 -0400 (EDT)
From: "Steven M. Christey" <coley@...-smtp.mitre.org>
To: oss-security@...ts.openwall.com
cc: cve@...re.org, Gentoo Linux Security Team <security@...too.org>
Subject: Re: libfpx Duplicate CVEs (CVE-2011-5232 and
CVE-2012-0025)
Sean,
Agree with this duplicate, too.
Keep CVE-2012-0025 and REJECT CVE-2011-5232.
Thanks,
Steve
On Tue, 30 Oct 2012, Sean Amoss wrote:
> Steve, MITRE, vendors:
>
> Another possible duplicate CVE assignment below :D
>
> CVE-2011-5232 - Double free vulnerability in the Free_All_Memory
> function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the
> FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause
> a denial of service (crash) via a crafted FPX image.
>
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5232
>
> References to http://secunia.com/advisories/47246
>
> =======================================================================
>
> CVE-2012-0025 - libfpx "Free_All_Memory()" Double-Free Vulnerability
>
> CVE Assignment: http://www.openwall.com/lists/oss-security/2012/01/03/16
>
> References https://secunia.com/advisories/47246 in assignment above
>
>
> Thanks,
> Sean
>
> --
> Sean Amoss
> Gentoo Security | GLSA Coordinator
> E-Mail : ackle@...too.org
> GnuPG FP : E58A AABD DD2D 03AF 0A7A 2F14 1877 72EC E928 357A
>
>
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
