CVE-2010-3441

Published: Feb 18, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trim_title function; and possibly (3) a long -O option on a command line.

Affected (2)

Products: Moinejf: Abcm2ps · Fedoraproject: Fedora

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Moinejf Abcm2ps	Before 5.9.12

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 14

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (22)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html

Source: secalert@redhat.com

Third Party Advisory

http://moinejf.free.fr/abcm2ps-5.txt

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/39345

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/43338

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/5

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/6

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/7

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/39271

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0390

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=580435

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://moinejf.free.fr/abcm2ps-5.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/39345

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/43338

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/04/08/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/39271

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0390

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=580435

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.