RedHat pesign 代码问题漏洞

pesign is a tool for signing PE-COFF binaries, and is expected to be at least vaguely compliant with the PE and Authenticode specifications. A security vulnerability exists in pesign that stems from the inability of the cmssetpwdata function in the cmscommon.c file to handle NULL pwdata calls fro...