bugGNU gv - Bugs: bug #18336, GNU GV Stack Buffer Overflow...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #18336: GNU GV Stack Buffer Overflow Vulnerability

Submitted by:  None
Submitted on:  Tue 21 Nov 2006 02:26:39 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Jose E. Marchesi <jemarch>
Open/Closed: ClosedRelease: 3.6.3

Mon 25 Jun 2007 09:00:54 PM UTC, comment #1:

Patch applied and verified.

Jose E. Marchesi <jemarch>In charge of this item.
Tue 21 Nov 2006 02:26:39 PM UTC, original submission:

For a full description of the bug, see

http://www.securityfocus.com/bid/20978

Here is a short extract from that page:

"GNU gv is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected application. Failed attempts will likely crash the application, resulting in denial-of-service conditions.

Version 3.6.2 is reported vulnerable; other versions may also be affected.

NOTE: Various other applications may employ embedded GNU gv code and could also be vulnerable as a result."

Anonymous

 

Attached Files
file #12518:  patch-ac added by None (758B - application/octet-stream - This appears to be a patch for this vulernability (from http://cvsweb.netbsd.se/cgi-bin/bsdweb.cgi/pkgsrc/print/gv/patches/patch-ac))

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by jemarch (Updated the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 25 Jun 2007 09:00:54 PM UTCjemarchStatusIn Progress=>Fixed
      Open/ClosedOpen=>Closed
    Mon 25 Jun 2007 03:01:16 PM UTCjemarchReleaseNone=>3.6.3
    Mon 25 Jun 2007 02:53:48 PM UTCjemarchStatusNone=>In Progress
      Assigned toNone=>jemarch
    Wed 18 Apr 2007 07:19:30 PM UTCNoneAttached File-=>Added patch-ac, #12518

    Back to the top


    Powered by Savane 3.1-cleanup1