diff options
| author | stas <stas@FreeBSD.org> | 2009-10-25 22:23:33 +0800 |
|---|---|---|
| committer | stas <stas@FreeBSD.org> | 2009-10-25 22:23:33 +0800 |
| commit | d69ccff9ab90fb3f3a0602df3590d31ae865627b (patch) | |
| tree | 4d5e1f50b7540c82ade13fb33c7ccad7eeb3f73c /security/vuxml/vuln.xml | |
| parent | 271bda10cfb64a671f2eed4ba90434144e34aa47 (diff) | |
| download | freebsd-ports-gnome-d69ccff9ab90fb3f3a0602df3590d31ae865627b.tar.gz freebsd-ports-gnome-d69ccff9ab90fb3f3a0602df3590d31ae865627b.tar.zst freebsd-ports-gnome-d69ccff9ab90fb3f3a0602df3590d31ae865627b.zip | |
- Document elinks < 0.11.4 buffer overflow vulnerability.
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index c0cb8a64289e..f6687ba6074c 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -35,6 +35,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="2544f543-c178-11de-b175-001cc0377035"> + <topic>elinks -- buffer overflow vulnerability</topic> + <affects> + <package> + <name>elinks</name> + <range><lt>0.11.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>SecurityFocus reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/36574/discuss"> + <p>ELinks is prone to an off-by-one buffer-overflow vulnerability + because the application fails to accurately reference the last + element of a buffer.</p> + <p>Attackers may leverage this issue to execute arbitrary code in + the context of the application. Failed attacks will cause + denial-of-service conditions.</p> + </blockquote> + </body> + </description> + <references> + <bid>36574</bid> + <cvename>CVE-2008-7224</cvename> + <mlist msgid="20080204235429.GA28006@diku.dk">http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html</mlist> + <url>http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347</url> + </references> + <dates> + <discovery>29-07-2006</discovery> + <entry>2009-10-25</entry> + </dates> + </vuln> + <vuln vid="692ab645-bf5d-11de-849b-00151797c2d4"> <topic>squidGuard -- multiple vulnerabilities</topic> <affects> |