[Bug 1934823] New: CVE-2020-28591 slic3r: Out-of-bounds read in AMFParserContext::endElement()

https://bugzilla.redhat.com/show_bug.cgi?id=1934823

            Bug ID: 1934823
           Summary: CVE-2020-28591 slic3r: Out-of-bounds read in
                    AMFParserContext::endElement()
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: low
          Priority: low
          Assignee: security-response-team(a)redhat.com
          Reporter: psampaio(a)redhat.com
                CC: mhroncok(a)redhat.com,
                    perl-devel(a)lists.fedoraproject.org
  Target Milestone: ---
    Classification: Other



An out-of-bounds read vulnerability exists in the AMF File
AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and
Master Commit 92abbc42. A specially crafted AMF file can lead to information
disclosure. An attacker can provide a malicious file to trigger this
vulnerability.

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1215


-- 
You are receiving this mail because:
You are on the CC list for the bug.