Description
Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | abcm2ps | 5.9.22-1 | — |
| Debian 13 | abcm2ps | 5.9.22-1 | — |
| Debian 12 | abcm2ps | 5.9.22-1 | — |
References
- 40033 third-party-advisory
- FEDORA-2011-1851 vendor-advisory
- ADV-2011-0390 vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014
- https://bugzilla.redhat.com/show_bug.cgi?id=600729
- 43338 third-party-advisory
- FEDORA-2011-1092 vendor-advisory
- http://moinejf.free.fr/abcm2ps-5.txt