CVE-2002-0143

Description

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

Affected products

• enlightenment / imlib2.0.01.0.0 – 2.0.01.0.0
• enlightenment / imlib2.1.0.1 – 2.1.0.1
• enlightenment / imlib2.1.0.2 – 2.1.0.2
• enlightenment / imlib2.1.0.3 – 2.1.0.3
• enlightenment / imlib2.1.0.4 – 2.1.0.4
• michael_jennings / eterm0.9.1 – 0.9.1

Exploits & proofs of concept

• exploit-dbIMLib2 - Home Environment Variable Buffer Overflowby Charles Stevenson

References

• MISChttp://www.securityfocus.com/bid/3868
• MISChttp://online.securityfocus.com/archive/1/251597
• MISChttp://online.securityfocus.com/archive/1/250145
• MISChttp://www.iss.net/security_center/static/7896.php