oss-security - Asking for CVE for imagemagick

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAE2SPAZB28DQA-Z87pF2qypXOOF9cf1bqZy8AMDmNfep960uxQ@mail.gmail.com>
Date: Fri, 7 Nov 2014 20:41:00 +0100
From: Bastien ROUCARIES <roucaries.bastien@...il.com>
To: oss-security@...ts.openwall.com
Subject: Asking for CVE for imagemagick

Hi,

I am asking for two CVE for imagemagick (two DOS):
- Converting some specially crafted jpeg could lead to a dos (see
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456)
- Converting some dcm file could lead to crash then DOS:
Fix last value in dicom_info and added missing != NULL check.

Fix a buffer overflow in dcm reader by checking the dcm file.
This problem was discovered by fuzzing some dcm file.

Thanks

Bastien

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.