CVE Vulnerabilities

CVE-2003-0972

Published: Dec 15, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ; (semicolon) characters in escape sequences, which leads to a buffer overflow.

Affected Software

Name Vendor Start Version End Version
Screen Gnu 3.9.4 3.9.4
Screen Gnu 3.9.8 3.9.8
Screen Gnu 3.9.9 3.9.9
Screen Gnu 3.9.10 3.9.10
Screen Gnu 3.9.11 3.9.11
Screen Gnu 3.9.13 3.9.13
Screen Gnu 3.9.15 3.9.15
Screen Gnu 4.0.1 4.0.1
Screen Ubuntu dapper *
Screen Ubuntu devel *
Screen Ubuntu edgy *
Screen Ubuntu feisty *

References