CVE-2002-1277 Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and....
HighCVSS 7.5
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| windowmaker | = 0.20.1.3 | No fix listed |
| windowmaker | = 0.52.2 | No fix listed |
| windowmaker | = 0.53 | No fix listed |
| windowmaker | = 0.61 | No fix listed |
| windowmaker | = 0.61.1 | No fix listed |
| windowmaker | = 0.62 | No fix listed |
| windowmaker | = 0.62.1 | No fix listed |
| windowmaker | = 0.63 | No fix listed |
| windowmaker | = 0.63.1 | No fix listed |
| windowmaker | = 0.64 | No fix listed |
| windowmaker | = 0.65 | No fix listed |
| windowmaker | = 0.80 | No fix listed |
| debian/wmaker(Debian:12) | < 0.80.1-4 | 0.80.1-4 |
| debian/wmaker(Debian:13) | < 0.80.1-4 | 0.80.1-4 |
| debian/wmaker(Debian:14) | < 0.80.1-4 | 0.80.1-4 |
References
- CLA-2002:548 vendor-advisory
- DSA-190 patch vendor-advisory
- window-maker-image-bo(10560) vdb-entry vendor-advisory
- MDKSA-2002:085 vendor-advisory
- RHSA-2003:009 patch vendor-advisory
- RHSA-2003:043 vendor-advisory
- 6119 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1277 vendor-advisory