Johnny Mast has reported a vulnerability in LibAST, which potentially can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to a boundary error in the "conf_find_file()" function in conf.c. This can be exploited to cause a stack-based buffer overflow and allows arbitrary code execution via an overly long filename.

Successful exploitation requires that the library is linked with a setuid or setgid application.

The vulnerability has been reported in versions prior to 0.7.

Solution
Update to version 0.7.
Further details available in Customer Area

Provided and/or discovered by
Johnny Mast, Rosiello Security.

Original Advisory
http://article.gmane.org/gmane.comp.window-managers.enlightenment.announce/9
http://www.rosiello.org/en/read_bugs.php?id=25

Deep Links
Links available in Customer Area