PuTTY 安全性問題 (CVE-2015-5309)

雖然很久沒用 PuTTY 了 (因為用 Ubuntu 很久了)，不過很難得看到 PuTTY 有安全性問題。 PuTTY 官方發佈了安全性通報 CVE-2015-5309：「PuTTY vulnerability vuln-ech-overflow」： Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH (erase characters) control sequence in … Continue reading →

from Gea-Suan Lin's BLOG https://blog.gslin.org/archives/2015/11/09/6113/putty-%e5%ae%89%e5%85%a8%e6%80%a7%e5%95%8f%e9%a1%8c-cve-2015-5309/
via IFTTT