CVE-2009-2905

2009-09-2919:30:00

CWE-119

redhat

web.nvd.nist.gov

cve-2009-2905

security vulnerability

buffer overflow

newt

denial of service

arbitrary code execution

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

Percentile

10.1%

JSON

Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.

Affected configurations

Nvd

Node

fedorahostednewtMatch0.51.5

fedorahostednewtMatch0.51.6

fedorahostednewtMatch0.52.2

VendorProductVersionCPE
fedorahostednewt0.51.5cpe:2.3:a:fedorahosted:newt:0.51.5:*:*:*:*:*:*:*
fedorahostednewt0.51.6cpe:2.3:a:fedorahosted:newt:0.51.6:*:*:*:*:*:*:*
fedorahostednewt0.52.2cpe:2.3:a:fedorahosted:newt:0.52.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fedorahosted	newt	0.51.5	cpe:2.3:a:fedorahosted:newt:0.51.5:::::::*
fedorahosted	newt	0.51.6	cpe:2.3:a:fedorahosted:newt:0.51.6:::::::*
fedorahosted	newt	0.52.2	cpe:2.3:a:fedorahosted:newt:0.52.2:::::::*