Wooseok Kang

potential buffer overflow in setup.c

potential integer overflow vulnerability

potential buffer overflow in audiolib.c

potential buffer overflow in server_common.c

potential buffer overflow in auphone.c

Dear maintainer, In libquicktime2, there is an integer overflow vulnerability that may cause arbitrary code execution in the 32bit system. The vulnerability resides in some functions of the program. For example, in quicktime_read_elst() program reads data from file and multiply it with sizeof(quicktime_elst_table_t). In 32bit os, it causes integer overflow then the small heap block is allocated. It leads to buffer overrun when reads data to this buffer. void quicktime_read_elst(quicktime_t *file,...

integer overflow for maliciously crafted tga file