CVE-2008-3252

Publication date 21 July 2008

Last updated 24 July 2024


Ubuntu priority

Description

Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.

Status

Package Ubuntu Release Status
newsx 9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Fixed 1.6-2etch1build0.8.04.1
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.06 LTS dapper
Fixed 1.6-2etch1build0.6.06.1