CVE-2009-2905

Published: Sep 29, 2009Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.

Affected (3)

Products: Fedorahosted: Newt

Fedorahosted

1 product

Newt

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fedorahosted Newt	Version 0.51.5
Fedorahosted Newt	Version 0.51.6
Fedorahosted Newt	Version 0.52.2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (32)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2010/000082.html

Source: secalert@redhat.com

http://secunia.com/advisories/37922

Source: secalert@redhat.com

http://secunia.com/advisories/38794

Source: secalert@redhat.com

http://secunia.com/advisories/38833

Source: secalert@redhat.com

http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz

Source: secalert@redhat.com

Patch

http://support.avaya.com/css/P8/documents/100067251

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1894

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/36515

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-837-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0528

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=523955

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-1463.html

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705