CVE-2005-0686

2005-03-0805:00:00

mitre

web.nvd.nist.gov

cve-2005-0686

integer overflow

mlterm

remote code execution

gdk-pixbuf

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.009

Percentile

83.0%

JSON

Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.

Affected configurations

Nvd

Node

mltermmltermMatch2.5

mltermmltermMatch2.6

mltermmltermMatch2.6.1

mltermmltermMatch2.6.2

mltermmltermMatch2.6.3

mltermmltermMatch2.7

mltermmltermMatch2.8

mltermmltermMatch2.9

mltermmltermMatch2.9.1

VendorProductVersionCPE
mltermmlterm2.5cpe:2.3:a:mlterm:mlterm:2.5:*:*:*:*:*:*:*
mltermmlterm2.6cpe:2.3:a:mlterm:mlterm:2.6:*:*:*:*:*:*:*
mltermmlterm2.6.1cpe:2.3:a:mlterm:mlterm:2.6.1:*:*:*:*:*:*:*
mltermmlterm2.6.2cpe:2.3:a:mlterm:mlterm:2.6.2:*:*:*:*:*:*:*
mltermmlterm2.6.3cpe:2.3:a:mlterm:mlterm:2.6.3:*:*:*:*:*:*:*
mltermmlterm2.7cpe:2.3:a:mlterm:mlterm:2.7:*:*:*:*:*:*:*
mltermmlterm2.8cpe:2.3:a:mlterm:mlterm:2.8:*:*:*:*:*:*:*
mltermmlterm2.9cpe:2.3:a:mlterm:mlterm:2.9:*:*:*:*:*:*:*
mltermmlterm2.9.1cpe:2.3:a:mlterm:mlterm:2.9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mlterm	mlterm	2.5	cpe:2.3:a:mlterm:mlterm:2.5:::::::*
mlterm	mlterm	2.6	cpe:2.3:a:mlterm:mlterm:2.6:::::::*
mlterm	mlterm	2.6.1	cpe:2.3:a:mlterm:mlterm:2.6.1:::::::*
mlterm	mlterm	2.6.2	cpe:2.3:a:mlterm:mlterm:2.6.2:::::::*
mlterm	mlterm	2.6.3	cpe:2.3:a:mlterm:mlterm:2.6.3:::::::*
mlterm	mlterm	2.7	cpe:2.3:a:mlterm:mlterm:2.7:::::::*
mlterm	mlterm	2.8	cpe:2.3:a:mlterm:mlterm:2.8:::::::*
mlterm	mlterm	2.9	cpe:2.3:a:mlterm:mlterm:2.9:::::::*
mlterm	mlterm	2.9.1	cpe:2.3:a:mlterm:mlterm:2.9.1:::::::*