Vulnerability CVE-2005-0639

Vulnerability CVE-2005-0639

Published: 2005-03-02 Modified: 2012-02-12

Description:

Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
XLI -> XLI
SUSE -> Suse linux
Altlinux -> Alt linux

References:

http://secunia.com/advisories/14459

http://www.debian.org/security/2005/dsa-695

http://security.gentoo.org/glsa/glsa-200503-05.xml

http://bugs.gentoo.org/show_bug.cgi?id=79762

Copyright 2024, cxsecurity.com