| |||||||||||||
Image handling vulnerabilitiesImage handling vulnerabilitiesPosted Apr 24, 2008 22:50 UTC (Thu) by dvdeug (subscriber, #10998)Parent article: Image handling vulnerabilities
It goes beyond images; it seems we get a vulnerability about video or sound on a weekly basis, too. It seems that few programs thoroughly verify their input, even when it likely comes from untrusted sources on the net.
(Log in to post comments)
Image handling vulnerabilities Posted Apr 25, 2008 0:54 UTC (Fri) by bronson (subscriber, #4806) [Link] Notice how there's never vulns with decoding PCM sound files. Why? Because PCM is easy. The more complex a file format, the harder it is to get right. Packetized streams like MPEG and AVI are outrageously complex to decode and process. It requires huge amounts of code with non-trivial stateful interaction between components. I'm not sure it's even possible to thoroughly verify a zip archive, much less an MPEG stream!
|
|||||||||||||