[Webkit-unassigned] [Bug 139764] New: buffer overflow parsing plugin information

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Dec 17 21:43:44 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=139764

            Bug ID: 139764
           Summary: buffer overflow parsing plugin information
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Windows 7
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: b.collins at sentrybay.com

Created attachment 243481
  --> https://bugs.webkit.org/attachment.cgi?id=243481&action=review
patch

getVersionInfo in PluginPackageWin.cpp has a buffer overflow. VerQueryValueW returns the size of the buffer in bytes, not TCHARs for translation values

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141218/c8029d48/attachment-0002.html>


More information about the webkit-unassigned mailing list