Lucene search

K
freebsdFreeBSD20E23B65-A52E-11E3-AE3A-00224D7C32A2
HistoryFeb 06, 2007 - 12:00 a.m.

xmms -- Integer Overflow And Underflow Vulnerabilities

2007-02-0600:00:00
vuxml.freebsd.org
17

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.282

Percentile

96.9%

Secunia reports:

Secunia Research has discovered two vulnerabilities in XMMS, which can
be exploited by malicious people to compromise a user’s system.

  1. An integer underflow error exists in the processing of skin bitmap
    images. This can be exploited to cause a stack-based buffer overflow
    via specially crafted skin images containing manipulated header
    information.
    Successful exploitation allows execution of arbitrary code.
  2. An integer overflow error exists in the processing of skin bitmap
    images. This can be exploited to cause memory corruption via specially
    crafted skin images containing manipulated header information.
    Successful exploitation may allow the execution of arbitrary code.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchxmms<= 1.2.11_20UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.282

Percentile

96.9%