diff options
| author | hrs <hrs@FreeBSD.org> | 2005-02-24 23:43:23 +0800 |
|---|---|---|
| committer | hrs <hrs@FreeBSD.org> | 2005-02-24 23:43:23 +0800 |
| commit | aea442cc52bfa76009395885343c7a1791f1c281 (patch) | |
| tree | 4b1dd2ae484f71da00c5c0ba2ca1835bc3e31d2e /security | |
| parent | edc88a905e8372ec24c597f5080554a9f5802291 (diff) | |
| download | freebsd-ports-gnome-aea442cc52bfa76009395885343c7a1791f1c281.tar.gz freebsd-ports-gnome-aea442cc52bfa76009395885343c7a1791f1c281.tar.zst freebsd-ports-gnome-aea442cc52bfa76009395885343c7a1791f1c281.zip | |
Document a format string vulnerability in mkbold-mkitalic.
Reviewed by: simon
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 15694d1f479f..ac7bc01b4266 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,30 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="32d4f0f1-85c3-11d9-b6dc-0007e900f747"> + <topic>mkbold-mkitalic -- format string vulnerability</topic> + <affects> + <package> + <name>mkbold-mkitalic</name> + <range><lt>0.07</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The version 0.06_1 and prior + have a format string vulnerability which can be triggered + by using a carefully-crafted BDF font file.</p> + </body> + </description> + <references> + <url>http://home.jp.FreeBSD.org/cgi-bin/showmail/ports-jp/15568</url> + </references> + <dates> + <discovery>2005-02-23</discovery> + <entry>2005-02-24</entry> + </dates> + </vuln> + <vuln vid="03653079-8594-11d9-afa0-003048705d5a"> <topic>phpbb -- multiple information disclosure vulnerabilities</topic> <affects> |