Description
Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.
References
- acon-home-bo(41915) vdb-entry
- 29909 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
- 28862 vdb-entry