bugtraq - Re: [Full-disclosure] [USN-515-1] t1lib vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 21 Sep 2007 16:21:00 +0300
From: Ismail Dönmez <ismail@...dus.org.tr>
To: 3APA3A <3APA3A@...urity.nnov.ru>
Cc: Kees Cook <kees@...ntu.com>, full-disclosure@...ts.grok.org.uk,
	bugtraq@...urityfocus.com, ubuntu-security-announce@...ts.ubuntu.com
Subject: Re: [Full-disclosure] [USN-515-1] t1lib vulnerability

On Friday 21 September 2007 15:30:31 3APA3A wrote:
> Dear Kees Cook,
>
> CVE-2007-4033  is  "Buffer  overflow  in php_gd2.dll in the gd (PHP_GD2)
> extension  in  PHP  5.2.3  allows context-dependent attackers to execute
> arbitrary code via a long argument to the imagepsloadfont function."

Correct URL is http://www.bugtraq.ir/adv/t1lib.txt though no CVE is assigned 
AFAIK.

Regards,
ismail

-- 
Be the change you want to see in the world.