Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 19 Apr 2012 14:36:45 +0200
From: Miklos Vajna <>
To: Caolán McNamara <>
	"Steven M. Christey" <>,,
	David Tardon <>,
	Carlo Di Dato <>
Subject: Re: [Officesecurity] CVE Request (minor) -- LibreOffice (X >=
 v3.5.0): DoS (excessive CPU use) in the RTF tokenizer

On Thu, Apr 19, 2012 at 01:33:07PM +0100, Caolán McNamara <> wrote:
> On Thu, 2012-04-19 at 14:14 +0200, Jan Lieskovsky wrote:
> > Though Caolán , Miklos or LibreOffice upstream can clarify further if
> > this should be considered to be a security flaw (due to internal
> > implementation details I am not aware of and might lead to memory
> > corruption announced at [7]).
> nah, insta-crash with a -1 passed to new(...) so throws bad_alloc,
> "safe" crash.

+1, as far as I see.


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.