FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-6531

This CVE name corresponds to:

Entered	Topic
2008-01-22	xfce -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-6531 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-6531
Phase	Assigned(20071227)

Description

Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be exploitable for a crash or code execution, so it is not a vulnerability.

References

Source	Reference
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=201293
CONFIRM	http://www.xfce.org/documentation/changelogs/4.4.2
MISC	http://bugs.gentoo.org/show_bug.cgi?id=201289
GENTOO	GLSA-200801-06
VUPEN	ADV-2008-0080
OSVDB	43422