Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
bugs in IJG jpeg6b & libjpeg-turbo
Dec 04 2013 06:45AM
Michal Zalewski (lcamtuf coredump cx)
So, for one reason or another, the IJG jpeg library has gained some
notoriety as one of the most robust pieces of complex,
security-critical C code. Despite countless fuzzing efforts, I don't
recall any reports of serious vulnerabilities at least since the
release of jpeg6b in 1998 ...
[ more ]
Copyright 2010, SecurityFocus