NetSight
IP …
medium4.3Public exploit code

CVE-2009-2286

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch.

Affected products

VendorProductAffected versions
James AshtonCompface
through 1.5.2
Versions 1.4, 1.5, 1.5.1

Weakness classification

CWE-119

References