PT-2009-5083 · Xemacs · Xemacs

Tielei Wang · Published 2009-08-05 · Updated 2017-08-17 · CVE-2009-2688

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XEmacs version 21.4.22

Description The issue is related to multiple integer overflows in the glyphs-eimage.c file of XEmacs, specifically when running on Windows. These overflows can be triggered by processing crafted image files, including TIFF, PNG, and JPEG files, through the tiff instantiate, png instantiate, and jpeg instantiate functions, respectively. This can lead to a denial of service (crash) or potentially allow remote attackers to execute arbitrary code due to a heap-based buffer overflow.

Recommendations For XEmacs version 21.4.22, consider avoiding the use of the tiff instantiate, png instantiate, and jpeg instantiate functions until a patch is available, or restrict the processing of TIFF, PNG, and JPEG files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-2688

Affected Products

Xemacs

References · 14

• https://security-tracker.debian.org/tracker/CVE-2009-2688 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-2688 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-2688 · Vendor Advisory
• http://secunia.com/advisories/35348 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2688 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51333 · Note
• http://tracker.xemacs.org/XEmacs/its/issue534 · Note
• http://osvdb.org/55298 · Note
• http://securityfocus.com/bid/35473 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51334 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51332 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=511994 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=275397 · Note