CVE-2009-2905

2009-09-2919:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

Percentile

10.1%

JSON

Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.

Affected configurations

Nvd

Node

fedorahostednewtMatch0.51.5

fedorahostednewtMatch0.51.6

fedorahostednewtMatch0.52.2

VendorProductVersionCPE
fedorahostednewt0.51.5cpe:2.3:a:fedorahosted:newt:0.51.5:*:*:*:*:*:*:*
fedorahostednewt0.51.6cpe:2.3:a:fedorahosted:newt:0.51.6:*:*:*:*:*:*:*
fedorahostednewt0.52.2cpe:2.3:a:fedorahosted:newt:0.52.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fedorahosted	newt	0.51.5	cpe:2.3:a:fedorahosted:newt:0.51.5:::::::*
fedorahosted	newt	0.51.6	cpe:2.3:a:fedorahosted:newt:0.51.6:::::::*
fedorahosted	newt	0.52.2	cpe:2.3:a:fedorahosted:newt:0.52.2:::::::*