xterm 'main.c' Local Buffer Overflow Vulnerability
BID:72867
Info
xterm 'main.c' Local Buffer Overflow Vulnerability
| Bugtraq ID: | 72867 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 03 2015 12:00AM |
| Updated: | Mar 03 2015 12:00AM |
| Credit: | Vincent Lefevre |
| Vulnerable: |
Debian xterm 312-1 |
| Not Vulnerable: |
Debian xterm 314-1 |
Discussion
xterm 'main.c' Local Buffer Overflow Vulnerability
xterm is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks.
Local attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
xterm is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks.
Local attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
Exploit / POC
xterm 'main.c' Local Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
xterm 'main.c' Local Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
xterm 'main.c' Local Buffer Overflow Vulnerability
References:
References:
- xterm: buffer overflow with -S option (Debian)
- Debian xterm package - Homepage (Debian)
- xterm Product Page (xterm)