[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Potential Format String Vulnerability
|
From: |
Armin Ronacher |
|
Subject: |
Potential Format String Vulnerability |
|
Date: |
Fri, 13 Jul 2012 15:59:52 +0100 |
Hi,
The terminfo files contain format strings in some places and you can get
ncurses to segfault if you change them around. Before invoking tparm, there
should be some check that the format string is of the correct format because
you can definitely get apps to segfault this way.
Regards,
Armin
- Potential Format String Vulnerability,
Armin Ronacher <=