CVE-2009-2286

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file.  NOTE: this issue only affects compface on distributions that used a certain patch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
james_ashtoncompface
𝑥
≤ 1.5.2
james_ashtoncompface
1.4
james_ashtoncompface
1.5
james_ashtoncompface
1.5.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libcompface
bullseye
1:1.5.2-5
fixed
bookworm
1:1.5.2-5.1
fixed
sid
1:1.5.2-6
fixed
trixie
1:1.5.2-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libcompface
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
ignored
jaunty
ignored
intrepid
ignored
hardy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973
http://www.openwall.com/lists/oss-security/2009/06/29/2
http://www.openwall.com/lists/oss-security/2009/06/29/4
http://www.openwall.com/lists/oss-security/2009/07/03/1
http://www.securityfocus.com/bid/35863
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973
http://www.openwall.com/lists/oss-security/2009/06/29/2
http://www.openwall.com/lists/oss-security/2009/06/29/4
http://www.openwall.com/lists/oss-security/2009/07/03/1
http://www.securityfocus.com/bid/35863