CVE-2010-4743

CVE-2010-4743 is a heap-based buffer overflow in the getarena() function of abc2ps.c in abcm2ps prior to 5.9.13, enabling remote code execution via a crafted ABC file. The issue is part of a set of vulnerabilities affecting abcm2ps (including CVE-2010-3441 and CVE-2010-4744). Remediation in the c...

CVE-2010-3441

Abcm2ps is affected by CVE-2010-3441 and related CVEs. The issues are boundary errors in the PUT0/PUT1 macros, the trim_title() function, or a long -O command line option, leading to buffer overflows in versions before 5.9.13. A related heap-based overflow (CVE-2010-4743) in getarena() can also e...

CVE-2010-4744

CVE-2010-4744 concerns abcm2ps and is described in multiple sources (GLSA 201111-12, OpenVAS entries) as one of several vulnerabilities affecting the package. The Gentoo GLSA states users should upgrade to abcm2ps-5.9.13 or newer to mitigate the issues; Fedora/OSS advisories reference the same CV...