Debian DSA-508-1 : xpcd - buffer overflow

Jaguar discovered a vulnerability in one component of xpcd, a PhotoCD viewer. xpcd-svga, part of xpcd which uses svgalib to display graphics on the console, would copy user-supplied data of arbitrary length into a fixed-size buffer in the pcdopen function. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2004-0402

Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code...

CVE-2004-0402

CVE-2004-0402 concerns the xpcd package, specifically the xpcd-svga component, where a buffer overflow in the pcd_open function can copy user-supplied data into a fixed-size buffer. Connected advisories (Debian DSA-508, Mandrake MDKSA-2004:053, Ubuntu/Debian/NVD entries) confirm the vulnerability...