CVE-2008-3252 Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting w...
HighCVSS 10.0
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedora newsx | = 1.6-8.fc8 | No fix listed |
| fedora newsx | = 1.6-9.fc9 | No fix listed |
References
- 31080 third-party-advisory vendor-advisory
- 31307 third-party-advisory
- DSA-1622 vendor-advisory
- 30231 vdb-entry
- bugzilla.redhat.com patch
- newsx-readarticle-bo(43844) vdb-entry
- FEDORA-2008-6319 vendor-advisory
- FEDORA-2008-6321 vendor-advisory