CVE-2005-0639

5 documents5 sources
Severity
7.5HIGH
EPSS
2.0%
top 16.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Altlinux ALT LinuxSuse Suse LinuxXLI XLI
Timeline
PublishedMar 2
Latest updateMay 1

Description

Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶Debianxloadimage< 4.1-14.2+3
▶Debianxli< 1.17.0-17+3
▶NVDxli/xli4 versions+3
▶NVDsuse/suse_linux28 versions+27

Patches

Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-xjf2-8w34-fqm8: Multiple vulnerabilities in xli before 1↗2022-05-01
▶
CVEList
CVE-2005-0639: Multiple vulnerabilities in xli before 1↗2005-03-04
▶
OSV
CVE-2005-0639: Multiple vulnerabilities in xli before 1↗2005-03-02
▶

📋Vendor Advisories

1
Debian
CVE-2005-0639: xli - Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execut...↗2005
▶
CVE-2005-0639 (HIGH CVSS 7.5) | Multiple vulnerabilities in xli bef | cvebase.io