漏洞信息详情

Typespeed addnewword函数 远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200605-543
• 危害等级： 高危
  
• CVE编号： CVE-2006-1515
• 漏洞类型： 缓冲区溢出
• 发布时间： 2006-05-31
• 威胁类型： 远程
• 更新时间： 2006-06-05
• 厂        商： typespeed
• 漏洞来源： Discovered by Niko...

漏洞简介

typespeed 0.4.4 及之前版本的addnewword函数存在缓冲区溢出。远程攻击者可以借助未知向量执行任意代码。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Typespeed Typespeed 0.4.1

Debian typespeed_0.4.1-2.4_alpha.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_alpha.deb

Debian typespeed_0.4.1-2.4_arm.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_arm.deb

Debian typespeed_0.4.1-2.4_hppa.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_hppa.deb

Debian typespeed_0.4.1-2.4_i386.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_i386.deb

Debian typespeed_0.4.1-2.4_ia64.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_ia64.deb

Debian typespeed_0.4.1-2.4_m68k.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_m68k.deb

Debian typespeed_0.4.1-2.4_mips.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_mips.deb

Debian typespeed_0.4.1-2.4_mipsel.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_mipsel.deb

Debian typespeed_0.4.1-2.4_powerpc.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_powerpc.deb

Debian typespeed_0.4.1-2.4_s390.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_s390.deb

Debian typespeed_0.4.1-2.4_sparc.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .1-2.4_sparc.deb

Typespeed Typespeed 0.4.4

Debian typespeed_0.4.4-8sarge1_alpha.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_alpha.deb

Debian typespeed_0.4.4-8sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_amd64.deb

Debian typespeed_0.4.4-8sarge1_arm.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_arm.deb

Debian typespeed_0.4.4-8sarge1_hppa.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_hppa.deb

Debian typespeed_0.4.4-8sarge1_i386.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_i386.deb

Debian typespeed_0.4.4-8sarge1_ia64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_ia64.deb

Debian typespeed_0.4.4-8sarge1_m68k.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_m68k.deb

Debian typespeed_0.4.4-8sarge1_mips.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_mips.deb

Debian typespeed_0.4.4-8sarge1_mipsel.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_mipsel.deb

Debian typespeed_0.4.4-8sarge1_powerpc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_powerpc.deb

Debian typespeed_0.4.4-8sarge1_s390.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_s390.deb

Debian typespeed_0.4.4-8sarge1_sparc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4 .4-8sarge1_sparc.deb

参考网址

来源: DEBIAN

名称: DSA-1084

链接:http://www.debian.org/security/2006/dsa-1084

来源: SECUNIA

名称: 20393

链接:http://secunia.com/advisories/20393

来源: BID

名称: 18194

链接:http://www.securityfocus.com/bid/18194

来源: VUPEN

名称: ADV-2006-2087

链接:http://www.frsirt.com/english/advisories/2006/2087

来源: SECUNIA

名称: 20379

链接:http://secunia.com/advisories/20379

来源: GENTOO

名称: GLSA-200606-20

链接:http://www.gentoo.org/security/en/glsa/glsa-200606-20.xml

来源: SECUNIA

名称: 20708

链接:http://secunia.com/advisories/20708

受影响实体

• Typespeed Typespeed:0.2  
• Typespeed Typespeed:0.3  
• Typespeed Typespeed:0.3.1  
• Typespeed Typespeed:0.3.2  
• Typespeed Typespeed:0.3.3  

补丁

暂无