Description
Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environment variable. NOTE: it is not clear whether this issue crosses privilege boundaries.
References
- http://www.eleytt.com/advisories/eleytt_FREEWRL.pdf
- 20070707 [Eleytt] 7LIPIEC2007 mailing-list
- 45807 vdb-entry