|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200503-18] Ringtone Tools: Buffer overflow vulnerability Vulnerability Scan
Vulnerability Scan Summary
Ringtone Tools: Buffer overflow vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200503-18
(Ringtone Tools: Buffer overflow vulnerability)
Qiao Zhang has discovered a buffer overflow vulnerability in the
'parse_emelody' function in 'parse_emelody.c'.
Impact
A remote attacker could entice a Ringtone Tools user to open a
specially crafted eMelody file, which would potentially lead to the
execution of arbitrary code with the rights of the user running the
application.
Workaround
There is no known workaround at this time.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1292
Solution:
All Ringtone Tools users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-misc/ringtonetools-2.23"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
