Lucene search

K
freebsdFreeBSD20E23B65-A52E-11E3-AE3A-00224D7C32A2
HistoryFeb 06, 2007 - 12:00 a.m.

xmms -- Integer Overflow And Underflow Vulnerabilities

2007-02-0600:00:00
vuxml.freebsd.org
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.243 Low

EPSS

Percentile

96.6%

Secunia reports:

Secunia Research has discovered two vulnerabilities in XMMS, which can
be exploited by malicious people to compromise a user’s system.

  1. An integer underflow error exists in the processing of skin bitmap
    images. This can be exploited to cause a stack-based buffer overflow
    via specially crafted skin images containing manipulated header
    information.
    Successful exploitation allows execution of arbitrary code.
  2. An integer overflow error exists in the processing of skin bitmap
    images. This can be exploited to cause memory corruption via specially
    crafted skin images containing manipulated header information.
    Successful exploitation may allow the execution of arbitrary code.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchxmms<= 1.2.11_20UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.243 Low

EPSS

Percentile

96.6%

Related for 20E23B65-A52E-11E3-AE3A-00224D7C32A2