[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <572964734.20070921163031@SECURITY.NNOV.RU>
Date: Fri, 21 Sep 2007 16:30:31 +0400
From: 3APA3A <3APA3A@...URITY.NNOV.RU>
To: Kees Cook <kees@...ntu.com>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
ubuntu-security-announce@...ts.ubuntu.com
Subject: Re: [USN-515-1] t1lib vulnerability
Dear Kees Cook,
CVE-2007-4033 is "Buffer overflow in php_gd2.dll in the gd (PHP_GD2)
extension in PHP 5.2.3 allows context-dependent attackers to execute
arbitrary code via a long argument to the imagepsloadfont function."
Please, provide valid CVE entry.
--Thursday, September 20, 2007, 12:18:02 AM, you wrote to ubuntu-security-announce@...ts.ubuntu.com:
KC> ===========================================================
KC> Ubuntu Security Notice USN-515-1 September 19, 2007
KC> t1lib vulnerability
KC> CVE-2007-4033
KC> ===========================================================
--
~/ZARAZA http://securityvulns.com/
Sir Isaac Newton discovered an apple falling to the ground (Mark Twain)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists