[37535] in bugtraq
FluxBox crash vulnerability
daemon@ATHENA.MIT.EDU (Quith)
Fri Nov 26 14:40:26 2004
Date: 26 Nov 2004 18:48:16 -0000
Message-ID: <20041126184816.7236.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Quith <quith@linux-hell.net>
To: bugtraq@securityfocus.com
Name: FluxBox
Homepage: http://www.fluxbox.org
Author: Quith <quith[at]linux-hell[dot]net>
Date: Fri Nov 26 15:07:30 UTC 2004
ISSUE:
FluxBox is a popular window manager for X, working under Linux/Unix operating systems. It's based on BlackBox and has 100% theme/style compability.
(Xman is a manual page browser for the X Window Systems.)
DESCRIPTION:
Fluxbox always crashes totally while executing XMAN with long value of
'-title' parameter. Simple usage example:
$ xman -title `perl -e 'print "X" x 10000 '`
It was tested on 0.9.10 version and some older ones. Probably all are affected.
------------------------------
Quith <quith@linux-hell.net>
http://www.quith.info
