PT-1999-1556 · Windowmaker · Windowmaker

Published 1999-08-22 · Updated 2016-10-18 · CVE-1999-1064

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WindowMaker versions 0.52 through 0.60.0

Description The issue is related to multiple buffer overflows that can cause a denial of service and potentially allow the execution of arbitrary commands. This can be achieved by executing WindowMaker with a long program name, specifically argv[0].

Recommendations For WindowMaker versions 0.52 through 0.60.0, update to a version later than 0.60.0 to resolve the issue.

Fix

Related Identifiers

CVE-1999-1064

Affected Products

Windowmaker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1064 · Security Note
• http://securityfocus.com/bid/596 · Note
• http://marc.info/?l=bugtraq&m=93582070508957&w=2 · Note
• http://marc.info/?l=bugtraq&m=93555317429630&w=2 · Note