PT-2005-4089 · Jan Kybic · Jan Kybic Bitmap Viewer

Felinemalice · Publicado 2005-10-23 · Atualizado 2017-07-11 · CVE-2005-3278

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jan Kybic BitMap Viewer (BMV) version 1.2

Description The issue is related to an integer overflow in the openpsfile function, which can be triggered by a PostScript (PS) file with a large number of pages value. This leads to a buffer overflow, allowing local users to execute arbitrary code.

Recommendations For version 1.2, consider restricting the use of the openpsfile function until a patch is available, or avoid opening PostScript files with large page values to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3278

DSA-981-1

Produtos afetados

Jan Kybic Bitmap Viewer

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-3278 · Nota de Segurança
• http://securityfocus.com/bid/15153 · Nota
• http://secunia.com/advisories/19029 · Nota
• http://securitytracker.com/id?1015086 · Nota
• http://debian.org/security/2006/dsa-981 · Aviso do Fabricante
• http://osvdb.org/20118 · Nota
• http://secunia.com/advisories/17266 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22815 · Nota
• http://felinemenace.org/advisories/bmv_advisory.txt · Aviso do Fabricante