CVE-2010-3441: Buffer Overflow
Abcm2ps upstream has released: [1] http://moinejf.free.fr/ [2] http://moinejf.free.fr/abcm2ps-5.9.12.tar.gz
latest v5.9.12 version, addressing "some security vulnerabilities" [3] http://moinejf.free.fr/abcm2ps-5.txt
References: [4] http://secunia.com/advisories/39345/
Requests for CVE(s) and further flaw(s) information: [5] http://www.openwall.com/lists/oss-security/2010/04/08/5 [6] http://www.openwall.com/lists/oss-security/2010/04/08/6
Other sources
Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trimtitle function; and possibly (3) a long -O option on a command line.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3441?
The severity of CVE-2010-3441 is not explicitly stated, but it addresses multiple security vulnerabilities in abcm2ps.
How do I fix CVE-2010-3441?
To fix CVE-2010-3441, you should upgrade to version 5.9.12 of abcm2ps.
What software is affected by CVE-2010-3441?
CVE-2010-3441 affects the abcm2ps software prior to version 5.9.12 and Fedora 14.
Is there a patch available for CVE-2010-3441?
Yes, users can resolve CVE-2010-3441 by downloading the updated version 5.9.12 from the official source.
Who is responsible for the vulnerability identified by CVE-2010-3441?
The vulnerability identified by CVE-2010-3441 is related to the upstream maintainer of abcm2ps, Moinejf.