bugGNU gv - Bugs: bug #18336, GNU GV Stack Buffer Overflow...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #18336: GNU GV Stack Buffer Overflow Vulnerability

Submitter:  None
Submitted:  Tue 21 Nov 2006 02:26:39 PM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  jemarch
Open/Closed:  Closed Release:  3.6.3

Mon 25 Jun 2007 09:00:54 PM UTC, comment #1: 

Patch applied and verified.

Jose E. Marchesi <jemarch>
Tue 21 Nov 2006 02:26:39 PM UTC, original submission:  

For a full description of the bug, see

http://www.securityfocus.com/bid/20978



Here is a short extract from that page:

"GNU gv is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected application. Failed attempts will likely crash the application, resulting in denial-of-service conditions.

Version 3.6.2 is reported vulnerable; other versions may also be affected.

NOTE: Various other applications may employ embedded GNU gv code and could also be vulnerable as a result."

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #12518:  patch-ac added by None (758B - application/octet-stream - This appears to be a patch for this vulernability (from http://cvsweb.netbsd.se/cgi-bin/bsdweb.cgi/pkgsrc/print/gv/patches/patch-ac))

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jemarch (Updated the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-06-25 jemarch StatusIn Progress Fixed
        Open/ClosedOpen Closed
    2007-06-25 jemarch ReleaseNone 3.6.3
    2007-06-25 jemarch StatusNone In Progress
        Assigned toNone jemarch
    2007-04-18 None Attached File- Added patch-ac, #12518

    Back to the top

    Powered by Savane 3.13-bb6a.
    Corresponding source code