CVE-2009-2905
- State
- Published
- Severity
- Not scored
- Published
- Sep 29, 2009
- Updated
- Aug 7, 2024
- Reserved
- Aug 20, 2009
Description
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 38794third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updatesmailing-list
- DSA-1894vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=523955
- RHSA-2009:1463vendor-advisory
- http://support.avaya.com/css/P8/documents/100067251
- 36515vdb-entry
- http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz
- oval:org.mitre.oval:def:8556vdb-entrysignature
- oval:org.mitre.oval:def:9664vdb-entrysignature
- 37922third-party-advisory
- USN-837-1vendor-advisory
- 38833third-party-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- SUSE-SR:2009:017vendor-advisory
- ADV-2010-0528vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.