Message-ID: <email address hidden>
Date: Thu, 23 Dec 2004 17:09:29 +0100
From: =?iso-8859-1?q?Frank_K=FCster?= <email address hidden>
To: <email address hidden>
Subject: Re: Bug#286984: tetex-bin: Vulnerable to CAN-2004-1125
Hilmar Preusse <email address hidden> schrieb:
> Thanks for the report! Hmm, xpdf 1.0 contains exactly the same
> vulnerable code.=20
I must be blind (or you looked at something different: I looked at the
code in tetex-bin_1.0.7+20011202-7.3, which does not contain xpdf-1.0,
but 0.92). I couldn't find it in these sources; the vulnerable part after
// get the mask
is missing.
TIA, Frank
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer
Message-ID: <email address hidden> 1?q?Frank_ K=FCster? = <email address hidden>
Date: Thu, 23 Dec 2004 17:09:29 +0100
From: =?iso-8859-
To: <email address hidden>
Subject: Re: Bug#286984: tetex-bin: Vulnerable to CAN-2004-1125
Hilmar Preusse <email address hidden> schrieb:
> Thanks for the report! Hmm, xpdf 1.0 contains exactly the same
> vulnerable code.=20
I must be blind (or you looked at something different: I looked at the 1.0.7+20011202- 7.3, which does not contain xpdf-1.0,
code in tetex-bin_
but 0.92). I couldn't find it in these sources; the vulnerable part after
// get the mask
is missing.
TIA, Frank
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer