-
Recent Posts
Recent Comments
- strongcourage on Why I stopped fuzzing research
- Bob Friesenhahn on Why I stopped fuzzing research
- #gentoo dev: Why I stopped fuzzing research https://blogs.gentoo.or… | Dr. Roy Schestowitz (罗伊) on Why I stopped fuzzing research
- Ulya on Why I stopped fuzzing research
- ago on Install Gentoo in less than one minute
Archives
- February 2025
- July 2020
- April 2020
- March 2019
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- February 2016
- July 2015
- August 2013
- June 2013
- May 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
Categories
Meta
Category Archives: security
imagemagick: use-after-free in DestroyImage (image.c)
Description: imagemagick is a software suite to create, edit, compose, or convert bitmap images. The complete ASan output of the issue: # convert $FILE null ==151587==ERROR: AddressSanitizer: heap-use-after-free on address 0x627000037d50 at pc 0x7f4697f94380 bp 0x7ffd1011d370 sp 0x7ffd1011d368 READ of … Continue reading
Posted in advisories, security
Leave a comment
libfpx: divide-by-zero in CDirVector::GetTable (dirfunc.hxx)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
libfpx: NULL pointer dereference in OLEStream::WriteVT_LPSTR (olestrm.cpp)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
libfpx: NULL pointer dereference in PFileFlashPixView::GetGlobalInfoProperty (f_fpxvw.cpp)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
libfpx: NULL pointer dereference in wchar.c
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
libfpx: NULL pointer dereference in CDirectory::GetDirEntry (dir.cxx)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
libfpx: heap-based buffer overflow in OLEStream::WriteVT_LPSTR (olestrm.cpp)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
1 Comment
libfpx: double-free in DfFromLB (docfile.cxx)
Description: libfpx is a library for manipulating FlashPIX images. I’m aware that the link to the upstream website does not work. I’m keeping it as well because in the future the upstream website could appear again. Libfpx is not actively … Continue reading
Posted in advisories, security
Leave a comment
graphicsmagick: heap-based buffer overflow in ReadSUNImage (sun.c)
Description: graphicsmagick is a collection of tools and libraries for many image formats. The complete ASan output of the issue: # gm convert -clip -negate $FILE out ==18510==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000015f4 at pc 0x7f6e936c556b bp 0x7fff17c33ab0 sp 0x7fff17c33aa8 … Continue reading
Posted in advisories, security
Leave a comment
graphicsmagick: invalid memory read in SetImageColorCallBack (image.c)
Description: graphicsmagick is a collection of tools and libraries for many image formats. The complete ASan output of the issue: # gm convert -clip -negate $FILE out ==11324==ERROR: AddressSanitizer: SEGV on unknown address 0x7f9ccac18000 (pc 0x7f9dbacf58ce bp 0x7ffec95349c0 sp 0x7ffec9534980 … Continue reading
Posted in advisories, security
2 Comments