xfpt vulnerable to stack-based buffer overflow

Overview xfpt fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability CWE-121. Yuhei Kawakoya of NTT Security Holdings Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact When ...

PT-2024-10102 · Xfpt +2 · Xfpt +2

Name of the Vulnerable Software and Affected Versions: xfpt versions prior to 1.01 Description: The issue is related to a stack-based buffer overflow vulnerability. It occurs when the software fails to handle some parameters inside the input data correctly. This can be exploited by tricking a use...

xfpt 安全漏洞

xfpt is a program by Philip Hazel, an individual developer. It converts a UTF-8 encoded tagged source document into an XML document. A security vulnerability exists in versions prior to xfpt 1.01 that stems from a failure to properly handle certain parameters in the input data, resulting in a...