CVE-2003-0972 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0972
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0972

Description: Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.

CVE Status: Candidate

References: SAID Secunia Advisory: SA10539 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2003:113 DEBIAN http://www.debian.org/security/2004/dsa-408 CONFIRM http://groups.yahoo.com/group/gnu-screen/message/3118 CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000809 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106995837813873&w=2

Return to the previous page.