PT-2005-4089 · Jan Kybic · Jan Kybic Bitmap Viewer

Felinemalice · Published 2005-10-23 · Updated 2017-07-11 · CVE-2005-3278

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jan Kybic BitMap Viewer (BMV) version 1.2

Description The issue is related to an integer overflow in the openpsfile function, which can be triggered by a PostScript (PS) file with a large number of pages value. This leads to a buffer overflow, allowing local users to execute arbitrary code.

Recommendations For version 1.2, consider restricting the use of the openpsfile function until a patch is available, or avoid opening PostScript files with large page values to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3278

DSA-981-1

Affected Products

Jan Kybic Bitmap Viewer

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-3278 · Security Note
• http://debian.org/security/2006/dsa-981 · Vendor Advisory
• http://secunia.com/advisories/17266 · Vendor Advisory
• http://felinemenace.org/advisories/bmv_advisory.txt · Vendor Advisory
• http://securityfocus.com/bid/15153 · Note
• http://secunia.com/advisories/19029 · Note
• http://securitytracker.com/id?1015086 · Note
• http://osvdb.org/20118 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22815 · Note