CVE-2010-3441

2011-02-1817:00:34

Debian Security Bug Tracker

security-tracker.debian.org

abcm2ps buffer overflow

remote attackers

arbitrary code

crafted input file

trim_title function

long command line option

unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.092

Percentile

94.8%

JSON

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trim_title function; and possibly (3) a long -O option on a command line.

OSVersionArchitecturePackageVersionFilename
Debian12allabcm2ps< 5.9.13-0.1abcm2ps_5.9.13-0.1_all.deb
Debian11allabcm2ps< 5.9.13-0.1abcm2ps_5.9.13-0.1_all.deb
Debian999allabcm2ps< 5.9.13-0.1abcm2ps_5.9.13-0.1_all.deb
Debian13allabcm2ps< 5.9.13-0.1abcm2ps_5.9.13-0.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	abcm2ps	< 5.9.13-0.1	abcm2ps_5.9.13-0.1_all.deb
Debian	11	all	abcm2ps	< 5.9.13-0.1	abcm2ps_5.9.13-0.1_all.deb
Debian	999	all	abcm2ps	< 5.9.13-0.1	abcm2ps_5.9.13-0.1_all.deb
Debian	13	all	abcm2ps	< 5.9.13-0.1	abcm2ps_5.9.13-0.1_all.deb