Processing commands for [EMAIL PROTECTED]:
> reassign 400121 libpcre3
Bug#400121: CVE-2006-6015: Buffer overflow in konqueror
Bug reassigned from package `konqueror' to `libpcre3'.
> stop
Stopping processing here.
Please contact me if you need assistance.
Debian bug
reassign 400121 libpcre3
stop
The problem is in the libpcre which konqueror calls : the pcretest program
itself crashes.
[EMAIL PROTECTED]:~$ pcretest
PCRE version 6.7 04-Jul-2006
re> /^(.)*$/
data> Z... (a "few" thousand "Z" in a row)
Erreur de segmentation
Package: konqueror
Version: 4:3.5.5a.dfsg.1-2
Severity: grave
Tags: security
Justification: user security hole
Konqueror crashes when opening the following page:
var reg = /(.)*/;
var z = 'Z';
while (z.length <= 8192) z+=z;
var boum = reg.exec(z);
The original poster claimed this could be
3 matches
Mail list logo
