xview -- multiple buffer overflows in xv_parse_one

2005-02-09T00:00:00
ID AE6EC9B8-2F43-4D02-8129-C6A3A53EF09D
Type freebsd
Reporter FreeBSD
Modified 2005-02-09T00:00:00

Description

A Debian Security Advisory reports:

Erik Sjölund discovered that programs linked against xview are vulnerable to a number of buffer overflows in the XView library. When the overflow is triggered in a program which is installed setuid root a malicious user could perhaps execute arbitrary code as privileged user.