TUCoPS :: HP Unsorted X

TUCoPS :: HP Unsorted X :: bx2935.htm
xine-lib NES Sound Format Demuxer Buffer Overflow

xine-lib NES Sound Format Demuxer Buffer Overflow xine-lib NES Sound Format Demuxer Buffer Overflow


Hi there=0D
=0D
Original advisory:=0D
http://milw0rm.com/exploits/5458=0D 
=0D
=0D
There's another stack-based buffer overflow in demux_nfs.c=0D
=0D
line 111:=0D
this->copyright = strdup(&header[0x4E]);=0D
line 189:=0D
char copyright[100];=0D
line 208:=0D
sprintf(copyright, "(C) %s", this->copyright);=0D
=0D
Regards Laurent Gaffi=E9