Home :: blogs :: secgeeks's blog

Ghostscript jbig2dec JBIG2 Processing Buffer Overflow Vulnerability

Hacker Halted 2010

By secgeeks - Posted on April 10th, 2009
589
vote

So after adobe,its in GhostScript.There is a patch as follows:
699 if (exrunlength > params->SDNUMEXSYMS - j)

here the vulnerable parameter is exrunlength,if its large then there is a overflow.
read more here.

Bookmark/Search this post with:
  • Newskicks
  • Delicious
  • Digg
  • StumbleUpon
  • Propeller
  • Reddit
  • Magnoliacom
  • Newsvine
  • Furl
  • Facebook
  • Google
  • Yahoo
  • Technorati
  • Icerocket

Trackback URL for this post:

http://secgeeks.com/trackback/2745