Lucene search
RootSSV:11765HistoryJul 07, 2009 - 12:00 a.m.
Dillo Png_datainfo_callback()函数整数溢出漏洞
2009-07-0700:00:00
Root
www.seebug.org
10
0.047 Low
EPSS
Percentile
92.7%
BUGTRAQ ID: 35575
CVE(CAN) ID: CVE-2009-2294
Dillo是运行在Unix平台上的轻量级浏览器。
Dillo的Png_datainfo_callback函数在解析内嵌了PNG图形的HTML页面时存在可最终导致堆溢出的整数溢出漏洞。如果攻击者在PNG图形中指定了超长的宽度和高度值，打开该图形就可以触发这个溢出，导致执行任意代码。
Dillo Project Dillo <= 2.1
厂商补丁：
Dillo Project
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
ubuntucve
ubuntucve
CVE-2009-2294
2009-07-05 00:00:00
securityvulns
securityvulns
Dillo browser integer overflow
2009-07-06 00:00:00
[oCERT-2009-008] Dillo integer overflow
2009-07-06 00:00:00
debiancve
debiancve
CVE-2009-2294
2009-07-05 16:30:00
nessus
nessus
GLSA-200908-10 : Dillo: User-assisted execution of arbitrary code
2009-08-20 00:00:00
cve
cve
CVE-2009-2294
2009-07-05 16:30:00
gentoo
gentoo
Dillo: User-assisted execution of arbitrary code
2009-08-18 00:00:00
cvelist
cvelist
CVE-2009-2294
2009-07-05 16:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200908-10 (dillo)
2009-09-02 00:00:00
Gentoo Security Advisory GLSA 200908-10 (dillo)
2009-09-02 00:00:00
prion
prion
Integer overflow
2009-07-05 16:30:00
nvd
nvd
CVE-2009-2294
2009-07-05 16:30:00