Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

file: heap-based buffer overflow

Package(s):

file

CVE #(s):

CVE-2009-1515

Created:

June 5, 2009

Updated:

June 10, 2009

Description:

From the Mandriva advisory: Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file.

Alerts:

Mandriva

MDVSA-2009:129

2009-06-05

(Log in to post comments)