[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 7 Nov 2014 20:41:00 +0100
From: Bastien ROUCARIES <roucaries.bastien@...il.com>
To: oss-security@...ts.openwall.com
Subject: Asking for CVE for imagemagick
Hi,
I am asking for two CVE for imagemagick (two DOS):
- Converting some specially crafted jpeg could lead to a dos (see
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456)
- Converting some dcm file could lead to crash then DOS:
Fix last value in dicom_info and added missing != NULL check.
Fix a buffer overflow in dcm reader by checking the dcm file.
This problem was discovered by fuzzing some dcm file.
Thanks
Bastien
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
