CVE-1999-1064: Buffer Overflow
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
WindowMakerfrom your environment.Uninstall WindowMaker or otherwise remove/avoid using the affected versions (0.52 through 0.60.0) until a fixed release is available.
- Compensating control
Restrict who can execute WindowMaker until it is patched — e.g., remove execute permission for untrusted accounts, restrict execution via sudoers or access control, and limit use to trusted systems so attackers cannot invoke it with a crafted long argv[0].
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1064?
CVE-1999-1064 is considered to have a high severity due to its potential for denial of service and execution of arbitrary commands.
How do I fix CVE-1999-1064?
To fix CVE-1999-1064, upgrade WindowMaker to version 0.60.1 or later, which addresses the buffer overflow vulnerabilities.
Which versions of WindowMaker are affected by CVE-1999-1064?
CVE-1999-1064 affects WindowMaker versions from 0.52 up to 0.60.0.
What type of vulnerability is CVE-1999-1064?
CVE-1999-1064 is a buffer overflow vulnerability that can lead to denial of service and arbitrary command execution.
Can CVE-1999-1064 be exploited remotely?
Yes, CVE-1999-1064 can potentially be exploited remotely if an attacker can manipulate the program name passed to WindowMaker.