-
Recent Posts
Recent Comments
- strongcourage on Why I stopped fuzzing research
- Bob Friesenhahn on Why I stopped fuzzing research
- #gentoo dev: Why I stopped fuzzing research https://blogs.gentoo.or… | Dr. Roy Schestowitz (罗伊) on Why I stopped fuzzing research
- Ulya on Why I stopped fuzzing research
- ago on Install Gentoo in less than one minute
Archives
- July 2020
- April 2020
- March 2019
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- February 2016
- July 2015
- August 2013
- June 2013
- May 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
Categories
Meta
Monthly Archives: January 2017
jasper: multiple crashes with UBSAN
Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. With the undefined behavior sanitizer enabled, jasper crashes showing some left shift and some signed integer overflow. Affected … Continue reading
Posted in advisories, security
2 Comments
libtiff: NULL pointer dereference in TIFFReadRawData (tiffinfo.c)
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. A crafted tiff file revealed a NULL pointer access. The complete ASan output: # tiffinfo -Dijr $FILE … Continue reading
Posted in advisories, security
Leave a comment
libtiff: assertion failure in readSeparateTilesIntoBuffer (tiffcp.c)
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. A crafted tiff file revealed an assertion failure. The complete output: # tiffcp -i $FILE /tmp/foo tiffcp: … Continue reading
Posted in advisories, security
Leave a comment
libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. A crafted tiff file revealed a stack buffer overflow. The complete ASan output: # tiffsplit $FILE TIFFReadDirectory: … Continue reading
Posted in advisories, security
1 Comment
libtiff: memcpy-param-overlap in t2p_tile_collapse_left (tiff2pdf.c)
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. A crafted tiff file revealed a memcpy-param-overlap. The complete ASan output: # tiff2pdf $FILE -o foo TIFFReadDirectoryCheckOrder: … Continue reading
Posted in advisories, security
Leave a comment
libtiff: invalid memory READ in t2p_writeproc (tiff2pdf.c)
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. A crafted tiff file revealed an invalid memory read. The complete ASan output: # tiff2pdf $FILE -o … Continue reading
Posted in advisories, arch testing
Leave a comment
libtiff: multiple heap-based buffer overflow
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. Some crafted images, through a fuzzing revealed multiple overflow. Since the number of the issues, I will … Continue reading
Posted in advisories, security
1 Comment
libtiff: multiple divide-by-zero
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. Some crafted images, through a fuzzing revealed multiple division by zero. Since the number of the issues, … Continue reading
Posted in advisories, security
Leave a comment