Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

unicon-imc2: buffer overflow

Package(s):

unicon-imc2

CVE #(s):

CVE-2007-2835

Created:

July 2, 2007

Updated:

July 3, 2007

Description:

The unicon-imc2 Chinese input method library does not safely use an environment variable. It is possible to use this to cause a buffer overflow and execute arbitrary code.

Alerts:

Debian

DSA-1328

2007-07-01

(Log in to post comments)