[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20181125151853.20345cbf@computer>
Date: Sun, 25 Nov 2018 15:18:53 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: Re: catdoc: out of bounds heap read and nullpointer
/ segfault
Hi,
On Sun, 25 Nov 2018 13:09:12 +0100
Agostino Sarubbo <ago@...too.org> wrote:
> something about catdoc was already reported time ago:
> https://marc.info/?l=oss-security&m=142627461816744&w=2
>
> I don't know atm if your findings are duplicate or not.
There was a version with fixes inbetween (0.95, may 2016) which says in
the changelog "Fixed lot of segfaults on incorrect or corrupted
data" [1].
My reports are mainly to have it publicly referenced that it's still
not robust.
[1] https://www.wagner.pp.ru/~vitus/software/catdoc/changelog.html
--
Hanno Böck
https://hboeck.de/
mail/jabber: hanno@...eck.de
GPG: FE73757FA60E4E21B937579FA5880072BBB51E42
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
