[poppler] JBIG2 0-day

[Albert Astals Cid]

A Dimecres, 25 de febrer de 2009, Albert Astals Cid va escriure:
> A Dimecres, 25 de febrer de 2009, Albert Astals Cid va escriure:
> > A Dimecres, 25 de febrer de 2009, Doctor PC va escriure:
> > > Link: http://secunia.com/blog/44/
> >
> > Still no pdf file in there so i can't tell you if we have this problem or
> > not.
>
> Doctor PC sent me
> e74ecf86b06829942cafa5b661af04f8  2009-41414141.pdf
>
> Which indeed crashes current poppler, i'm working on a patch for it.

Fixed that particular file, seeing JBIG2Stream code i'm sure there lots of 
other ways to crash it, just i don't have time to fix them all, so if you keep 
sending files that make poppler crash i'll fix them one by one.

Albert

>
> Albert
>
> > Albert
> >
> > > On 2/25/09, Doctor PC <llameadrpc at gmail.com> wrote:
> > > > Is poppler vulnerable to the JBIG2 0-day?
> > >
> > > _______________________________________________
> > > poppler mailing list
> > > poppler at lists.freedesktop.org
> > > http://lists.freedesktop.org/mailman/listinfo/poppler
> >
> > _______________________________________________
> > poppler mailing list
> > poppler at lists.freedesktop.org
> > http://lists.freedesktop.org/mailman/listinfo/poppler
>
> _______________________________________________
> poppler mailing list
> poppler at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/poppler