[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20150209214033.F2B0F3AE124@smtpvbsrv1.mitre.org>
Date: Mon, 9 Feb 2015 16:40:33 -0500 (EST)
From: cve-assign@...re.org
To: hecmargi@....es
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE-Request -- Google Email App 4.2.2 remote denial of service
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> A bug in the stock Google email application
Is the source code and fix in 4.2.2.0400 the same as in:
https://src.chromium.org/viewvc/blink?revision=152293&view=revision
? If so, then it is an open-source vulnerability, and can have one
CVE-2013-#### ID assigned here, even if the relevant HTTPParsers.cpp code
is also bundled in one or more closed-source products.
If it is independent source code that happens to have the same
attack vector (the attack vector in
http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html
appears to be identical to the attack vector in the
https://src.chromium.org/viewvc/blink/trunk/LayoutTests/http/tests/misc/resources/nearly-empty-content-disposition.php
test), then revision 152293 could probably have a separate new
CVE-2013-#### ID.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJU2SjYAAoJEKllVAevmvms7XgH/160UM97gBilVzyom9QDvbMs
qxDlphiOqH2J5+ShSPmKLmUcaT9snIylAQnBadTolsZxFeNsOjdIH0zJhnoafvUR
BjhUO1Z8ABrUifyLJuk0aezXErEoS2COVqaWu0IYYpJ3OPIExnGJw9cIQP4YHfDQ
aryvVRmsyasA42H72Ao+lF3W/om4fb8j32o78/Zp5Lp9yAn9Iq0XOtn/HjrhFCU9
TN6gil7OOb0nyKedRFmK60+Ek7ME+hIMCFrEftOJgZ6RTNc9V3fDJL2AD61jS8Wr
LF3FJSKoTRyA8QeRsL+zU9uCw3KHmx2l65rbxvjgURXMJgGykFIGVc22itJm8tM=
=xXk6
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
