randomssr

Jhead buffer overflow due to misuse of option "-ds"

1

When the option "-ds" is misused, the global array will overflow. jhead./jhead.c Line 1621-1644 ``` }else if (!memcmp(arg,"-ds",3)){ // Set date feature int a; // Check date validity and copy...

When the option "-te" argument contains "&i" and there are many string before "&i", the stack buffer will overflow. Jhead/jhead.c Line 502-507 ``` Subst = strstr(NamePattern, "&i"); if (Subst){ strncpy(OutFileName,...

catdoc global buffer overflow -- by misuse of the option "-b"

2

When the program input contains the option of "-b" , the program will cause global buffer overflow error. Test Environment Ubuntu 20.04, 64 bit catdoc (version: 0.95; ) How to...

Heap UAF in w3m

12

w3m heap-use-after-free Hello, w3m developers! I found a heap-use-after-free in w3m. Please confirm. Thanks! Test Environment Ubuntu 20.04, 64 bit w3m (version: w3m-0.5.3-git20220429;) How to trigger Compile the program with...