Unscored severity · published Oct 18, 2001
CVE-2001-0775
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or…
–
CVSS
16.3%
EPSS
No
On KEV
Description
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XL
Xli · Xli
1.16; 1.17 · source: NVD
XL
Xloadimage · Xloadimage
4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0775
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0775
www.debian.org
http://www.debian.org/security/2001/dsa-069
www.debian.org
http://www.debian.org/security/2005/dsa-695
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200503-05.xml
www.iss.net
http://www.iss.net/security_center/static/6821.php
www.novell.com
http://www.novell.com/linux/security/advisories/2001_024_xli_txt.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2001-088.html
More from Xli
–
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the…
–
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly…
–
CVE-2005-0639
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be…