Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

file: crash from malformed CDF files

Package(s):

file

CVE #(s):

Created:

March 1, 2012

Updated:

March 7, 2012

Description:

From the Debian advisory:

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File (CDF) format, leading to crashes.

Alerts:

Debian

DSA-2422-1

2012-02-29

(Log in to post comments)