CVE-2005-3279 — HIGH (7.2) — White Hats Nepal

Vulnerability Description

Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Jan Kybic	Bitmap Viewer	1.2

References

http://felinemenace.org/advisories/bmv_advisory.txtVendor Advisory
http://felinemenace.org/advisories/bmv_advisory.txtVendor Advisory

FAQ

What is CVE-2005-3279?

CVE-2005-3279 is a vulnerability with a CVSS score of 7.2 (HIGH). Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long ...

How severe is CVE-2005-3279?

CVE-2005-3279 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-3279?

Check the references section above for vendor advisories and patch information. Affected products include: Jan Kybic Bitmap Viewer.