Ubuntu
libmms package

Branches for Edgy

Name Status Last Modified Last Commit
lp:ubuntu/edgy/libmms 1 Development 2009-07-27 09:52:09 UTC
5. * SECURITY: CVE-2006-2200: buffer ove...

Author: Loïc Minier
Revision Date: 2006-07-11 13:11:11 UTC

* SECURITY: CVE-2006-2200: buffer overflows in mms / mmsh parsers:
  additional fixes thanks to Matthias Hopf:
  - even more checks on "packet_length" / "packet_len" in src/mms.c and
    src/mmsh.c
  - fix memset() calls in the two string_utf16() implementations in
    src/mms.c to clear all bytes in dest, "len" is the UTF-16 length of the
    string in wide chars, so the memset should use "2 * len".
1 → 1 of 1 result First • Previous • Next • Last