CVE-2002-1277

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548
http://www.debian.org/security/2002/dsa-190Patch, Vendor Advisory
http://www.iss.net/security_center/static/10560.phpVendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php
http://www.redhat.com/support/errata/RHSA-2003-009.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-043.html
http://www.securityfocus.com/bid/6119Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548
http://www.debian.org/security/2002/dsa-190Patch, Vendor Advisory
http://www.iss.net/security_center/static/10560.phpVendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php
http://www.redhat.com/support/errata/RHSA-2003-009.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-043.html
http://www.securityfocus.com/bid/6119Patch, Vendor Advisory

Timeline

Published: Nov 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-12787.5The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, g CVE-2002-12797.2Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via cert CVE-2002-12805.0Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash).CVE-2002-12817.5Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local an CVE-2002-12827.5Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute ar CVE-2002-12835.0Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request w CVE-2002-12844.6The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be CVE-2002-12857.2runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.CVE-2002-12867.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different CVE-2002-12875.0Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of CVE-2002-12885.0The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet CVE-2002-12897.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial o