oss-security - CVE Request : poppler

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <52395BFD.3010207@gmail.com>
Date: Wed, 18 Sep 2013 09:53:33 +0200
From: etienne <etiennehelluy@...il.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request : poppler < 0.13.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
I'd like to request a CVE number for the following issue
http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8

The bug has been fixed in poppler 0.13.3, back in 2010, though it is
still present and exploitable in several distributions.

Thanks,

Etienne
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlI5W/cACgkQCRpgAcXwxOcbEQCgoa8IZSrKjVjEfJRXBBLcNpom
mggAmQGZmKXz/5eYy5JVETtWxVB/rH4Y
=uavz
-----END PGP SIGNATURE-----


Download attachment "0xC5F0C4E7.asc" of type "application/pgp-keys" (1371 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.