diff options
| author | Nguyễn Gia Phong <cnx@loang.net> | 2025-02-26 15:38:17 +0900 |
|---|---|---|
| committer | Nguyễn Gia Phong <cnx@loang.net> | 2025-03-05 14:08:06 +0900 |
| commit | 9bb20b0036fdbd2f2e4c7246655daaa642e635d6 (patch) | |
| tree | 3d9baa964a74c6ecb08d67c2722c41ce8087738d /bugs | |
| parent | af245dbaca13ef33da686d5fc261fda8341597fc (diff) | |
| download | loftix-9bb20b0036fdbd2f2e4c7246655daaa642e635d6.tar.gz | |
Add ASan'ed libming 0.4.8 for CVE-2018-{8806,8964}
Diffstat (limited to 'bugs')
| -rw-r--r-- | bugs/README.md | 14 | ||||
| -rw-r--r-- | bugs/cve/2018/8806/heap-use-after-free.swf | bin | 0 -> 166 bytes | |||
| -rw-r--r-- | bugs/cve/2018/8964/heap-use-after-free.swf | bin | 0 -> 140 bytes |
3 files changed, 14 insertions, 0 deletions
diff --git a/bugs/README.md b/bugs/README.md index de9149a..c8ab237 100644 --- a/bugs/README.md +++ b/bugs/README.md @@ -77,6 +77,18 @@ guix shell -e '(@@ (loftix bugs) libjpeg-turbo-2.0.1-asan)' djpeg -colors 256 -bmp cve/2018/19664/heap-buffer-overflow-2.jpg +## libming + +- CVE-2018-8806: [use after free][libming-128] + + guix shell -e '(@@ (loftix bugs) libming-0.4.8-asan)' + swftophp cve/2018/8806/heap-use-after-free.swf + +- CVE-2018-8964: [use after free][libming-130] + + guix shell -e '(@@ (loftix bugs) libming-0.4.8-asan)' + swftophp cve/2018/8964/heap-use-after-free.swf + ## libtiff - CVE-2016-3186: [buffer overflow][redhat-1319503] @@ -209,6 +221,8 @@ [libarchive-717]: https://github.com/libarchive/libarchive/issues/717 [libjpeg-turbo-258]: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/258 [libjpeg-turbo-305]: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/305 +[libming-128]: https://github.com/libming/libming/issues/128 +[libming-130]: https://github.com/libming/libming/issues/130 [maptools-2554]: https://bugzilla.maptools.org/show_bug.cgi?id=2554 [maptools-2558]: https://bugzilla.maptools.org/show_bug.cgi?id=2558 [maptools-2587]: https://bugzilla.maptools.org/show_bug.cgi?id=2587 diff --git a/bugs/cve/2018/8806/heap-use-after-free.swf b/bugs/cve/2018/8806/heap-use-after-free.swf new file mode 100644 index 0000000..23c07c2 --- /dev/null +++ b/bugs/cve/2018/8806/heap-use-after-free.swf Binary files differdiff --git a/bugs/cve/2018/8964/heap-use-after-free.swf b/bugs/cve/2018/8964/heap-use-after-free.swf new file mode 100644 index 0000000..53376b6 --- /dev/null +++ b/bugs/cve/2018/8964/heap-use-after-free.swf Binary files differ |