CVE-2005-0686 Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mlterm | = 2.5 | No fix listed |
| mlterm | = 2.6 | No fix listed |
| mlterm | = 2.6.1 | No fix listed |
| mlterm | = 2.6.2 | No fix listed |
| mlterm | = 2.6.3 | No fix listed |
| mlterm | = 2.7 | No fix listed |
| mlterm | = 2.8 | No fix listed |
| mlterm | = 2.9 | No fix listed |
| mlterm | = 2.9.1 | No fix listed |
| debian/mlterm(Debian:12) | < 2.9.2 | 2.9.2 |
References
- GLSA-200503-13 patch vendor-advisory
- sourceforge.net patch vendor-advisory
- Debian Security Tracker CVE-2005-0686 vendor-advisory
- bugs.debian.org issue-tracking