Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

weex: format string vulnerability

Package(s):

weex

CVE #(s):

CAN-2005-3150

Created:

October 10, 2005

Updated:

October 10, 2005

Description:

Ulf Härnhammar from the Debian Security Audit Project discovered a format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions. This could be exploited to execute arbitrary code on the clients machine.

Alerts:

Debian	DSA-855-1	2005-10-10
Gentoo	200510-09	2005-10-08

(Log in to post comments)