25 matches found
CVE-2026-123785
Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...
CVE-2026-123784
Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...
CVE-2026-123785
Fluxbox versions through 1.3.7 are vulnerable to an infinite loop within the Menu::updateMenu() function located in src/FbTk/Menu.cc. An attacker can cause a denial of service (DoS) at startup by providing crafted style geometry values, specifically an oversized and unbounded menu.titleHeight. Th...
EUVD-2026-118303
Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...
CVE-2026-123785 Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry
Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...
CVE-2026-123784
Fluxbox versions through 1.3.7 are susceptible to an OS command injection vulnerability within the RootTheme::reconfigTheme() function. The root cause is the unescaped concatenation of user-provided style background values—such as pixmap paths, random directories, or gradient texture text—into an...
EUVD-2026-118302
Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...
CVE-2026-123784: fluxbox: Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows…
Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...
CVE-2026-123785: fluxbox: Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows…
Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...
EUVD-2004-1201
Malware in sbrugna...
WeakerThan Linux
Weakerthan is a penetration testing distribution which is built from Debian Squeeze. For the desktop environment it uses Fluxbox. This operating system is ideal for WiFi hacking as it contains plenty of Wireless tools. It has a very well maintained website and a devoted community. Built from Debi...
MDVA-2008:032 : fluxbox
The fluxbox package had an incorrect post-installation script which prevented the additional fonts files to be installed correctly. This update package fixes the fonts installation. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a securit...
MDVA-2008:032-1 : fluxbox
The fluxbox package had an incorrect post-installation script which prevented the additional fonts files to be installed correctly. Update: The previous package incorrectly added a requirement on a package that does not correct the problem. This update corrects that. %NASLMINLEVEL 70300...
Mandriva Update for fluxbox MDVA-2008:032-1 (fluxbox)
Check for the Version of fluxbox OpenVAS Vulnerability Test Mandriva Update for fluxbox MDVA-2008:032-1 fluxbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Mandriva Update for fluxbox MDVA-2008:032 (fluxbox)
Check for the Version of fluxbox OpenVAS Vulnerability Test Mandriva Update for fluxbox MDVA-2008:032 fluxbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for fluxbox MDVA-2008:032-1 (fluxbox)
Check for the Version of fluxbox OpenVAS Vulnerability Test Mandriva Update for fluxbox MDVA-2008:032-1 fluxbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Mandriva Update for fluxbox MDVA-2008:032 (fluxbox)
Check for the Version of fluxbox OpenVAS Vulnerability Test Mandriva Update for fluxbox MDVA-2008:032 fluxbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CVE-2004-1204
FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...
DEBIAN-CVE-2004-1204
FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...