Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA 200503-09 Normal: xv Filename Handling Code Execution

gentoo
Calendar Grey March 4, 2005
Scroller Gentoo
The Gentoo advisory GLSA 202104-08 discusses a vulnerability in the xyz application linked to poor input handling, enabling attackers to execute arbitrary code through crafted files
xv contains a format string vulnerability, potentially resulting in the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200503-09 https://security.gentoo.org/ Severity: Normal Title: xv: Filename handling vulnerability Date: March 04, 2005 Bugs: #83686 ID: 200503-09

Synopsis ======= xv contains a format string vulnerability, potentially resulting in the execution of arbitrary code.
Background ========= xv is an interactive image manipulation package for X11.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/xv < 3.10a-r10 >= 3.10a-r10
========== Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the handling of image filenames by xv.
Impact ===== Successful exploitation would require a victim to proces...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution normal severity filename handling

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution normal severity filename handling

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround