Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2006-2277 #564

Closed
cary-ilm opened this issue Sep 20, 2019 · 2 comments
Closed

CVE-2006-2277 #564

cary-ilm opened this issue Sep 20, 2019 · 2 comments
Milestone
v2.5.0

Comments

@cary-ilm
Copy link
Member

The test case is available here:

https://web.archive.org/web/20060520062054/http://w148.de/~cmertes/nachbarhaus1.exr

This no longer causes a crash, so we conclude that this has been resolved, as of 2.3.0 release at least, possibly earlier.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2277
@meshula
Copy link
Contributor

meshula commented Sep 20, 2019

I've confirmed this file does not cause a crash on iOS 12/13 or macOS 10.13+. Did not test on macOS 10.12 or less.

@cary-ilm
Copy link
Member Author

Confirmed that this does not crash in OpenEXR 2.0.0+. It produces an error message as expected, but no crash.

@cary-ilm cary-ilm added this to the v2.5.0 milestone Apr 27, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
v2.5.0
Development

No branches or pull requests
2 participants
@meshula @cary-ilm