Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-1999-1477 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Libs
4 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.3%
top 43.98%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedSep 23
Latest updateApr 30
Description
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0