CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerabil...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-43700 xfpt Corrigé dans: 0.11-1+deb11u1
Ubuntu UBUNTU-CVE-2024-43700 xfpt

Références

advisory github.com
advisory nvd.nist.gov
package github.com
patch github.com
web jvn.jp
web lists.debian.org