oss-security - CVE Request: VLC Buffer Overflow in ASF Demuxer

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130414093131.GA20475@elende>
Date: Sun, 14 Apr 2013 11:31:31 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: OSS Security Mailinglist <oss-security@...ts.openwall.com>
Subject: CVE Request: VLC Buffer Overflow in ASF Demuxer

Hi Kurt

I have not found a CVE assigned for the following issue already (note
upstream advisory also has only a CVE reference reference marked):

VLC Security Advisory 1302 is about Buffer Overflow in ASF Demuxer:

http://www.videolan.org/security/sa1302.html

With upstream git commit:

http://git.videolan.org/?p=vlc.git;a=commitdiff;h=b31ce523331aa3a6e620b68cdfe3f161d519631e

Can a CVE be assigned to this issue (in case it's not yet in progress)
to better track the issue?

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.