OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

mlterm -- integer overflow vulnerability

Affected packages
		mlterm	<	2.9.0p0

Details

VuXML ID	23ac1dfa-9273-11d9-ac88-080020fe8945
Discovery	2005-03-07
Entry	2005-03-11

mlterm is vulnerable to an integer overflow that can be triggered by specifying a large image file as a background. An attacker can create a specially-crafted image file which, when used as a background by the victim, can lead to the execution of arbitrary code with the privileges of the user running mlterm.

References

URL	https://sourceforge.net/project/shownotes.php?release_id=310416