wxWidgets Multiple Security Vulnerabilities

Bugtraq ID:	35258
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 04 2009 12:00AM
Updated:	Jun 08 2009 07:29PM
Credit:	Tielei Wang from ICST-ERCIS and the vendor
Vulnerable:	wxWidgets wxWidgets 2.8 wxWidgets wxWidgets 2.7 wxWidgets wxWidgets 2.5.3 wxWidgets wxWidgets 2.1.15
Not Vulnerable:

wxWidgets Multiple Security Vulnerabilities

wxWidgets is prone to multiple security vulnerabilities.

Exploiting these issues may allow remote attackers to execute arbitrary code in the context of an affected application. Failed exploit attempts will likely cause denial-of-service conditions.

These issues affect multiple applications on multiple platforms that use the affected library.

wxWidgets Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

wxWidgets Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.

wxWidgets Multiple Security Vulnerabilities

References:

• Changeset 60897 (wxWidgets)
  
• don't free() the same pointer twice if an error occurs during lines pointers all (VZ)
  
• wxWidgets Change Log (wxWidgets)
  
• wxWidgets Homepage (wxWidgets)