|
|
|
|
| |
Credit:
The information has been provided by Sven Krewitt, Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2007-47/
|
| |
Vulnerable Systems:
* xmms version 1.2.10 (Linux)
1) An integer underflow error exists in the processing of skin bitmap images. This can be exploited to cause a stack-based buffer overflow via specially crafted skin images containing manipulated header information.
Successful exploitation allows execution of arbitrary code.
CVE Information:
CVE-2007-0653
2) An integer overflow error exists in the processing of skin bitmap images. This can be exploited to cause memory corruption via specially crafted skin images containing manipulated header information.
Successful exploitation may allow the execution of arbitrary code.
CVE Information:
CVE-2007-0653
Solution:
Do not install skins from untrusted sources.
Time Table:
06/02/2007 - Vendor notified (Red Hat and the vendor-sec list).
06/02/2007 - Vendor response.
21/03/2007 - Public disclosure.
|
|
|
|
|
