Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Reading changelog
Re: Stack overflow in imagemagick coders/tiff.c
oss-sec mailing list archives From: Bob Friesenhahn <bfriesen () simple dallas tx us> Date: Wed, 14 Jun 2023 07:52:05 -0500 (CDT) On Wed, 14 Jun 2023, Salvatore Bonaccorso wrote: It seems suspicious that (after looking at the code) this is obviously a heap overflow (of the 'tile_pixels' allocation) rather than a stack overflow. Whenever something is mischaracterized, it becomes suspect.
Re: Stack overflow in imagemagick coders/tiff.c
oss-sec mailing list archives From: Salvatore Bonaccorso <carnil () debian org> Date: Wed, 14 Jun 2023 07:30:57 +0200 Hi On Mon, May 29, 2023 at 08:11:18AM +0000, Bastien Roucariès wrote: CVE-2023-3195 has been assigned for this issue according to https://bugzilla.redhat.com/show_bug.cgi?id=2214141 (not yet on cve.org feed itself). Regards, Salvatore Current thread: Stack overflow in imagemagick coders/tiff.c Bastien Roucariès (May 29) Re: Stack overflow in imagemagick coders/tiff.c
Re: Stack overflow in imagemagick coders/tiff.c
oss-sec mailing list archives From: Bastien Roucariès <rouca () debian org> Date: Mon, 29 May 2023 17:15:31 +0000 Le lundi 29 mai 2023, 08:11:18 UTC Bastien Roucariès a écrit : Hi following this bug I will also ask a few other CVE for imagemagick tiff coder (BTW cc me I am not subscribed) CVE#0 CVE #1 commit 7dbefda1c14e32d7bc4d3762a3a54f3ddaa85dd1 Author: Dirk Lemstra <dirk () lemstra org> Date: Sat Feb 19 07:46:46 2022 +0100 Raise exception when image could not be read but no exception was...
Stack overflow in imagemagick coders/tiff.c
oss-sec mailing list archives From: Bastien Roucariès <rouca () debian org> Date: Mon, 29 May 2023 08:11:18 +0000 Hi, Reading changelog and code of imagemagick, I want to report a stack overflow with crafted tiff file in imagemagick Fixed (after 6.9.12-26) by: https://github.com/ImageMagick/ImageMagick6/commit/85a370c79afeb45a97842b0959366af5236e9023 Original reporter was Muhammad Aldo Firmansyah Thanks Bastien (rouca) Current thread:
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Reading
Contact Reading, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack