Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvc | Andrew_hsu | 3 (including) | 3 (including) |
| Rolo | Andrew_hsu | 11 (including) | 11 (including) |
| Libvc | Ubuntu | devel | * |
References
- http://osvdb.org/ref/23/23985-libvc.txt
- http://secunia.com/advisories/19295
- http://www.osvdb.org/23985
- http://www.securityfocus.com/bid/17237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25430
- http://osvdb.org/ref/23/23985-libvc.txt
- http://secunia.com/advisories/19295
- http://www.osvdb.org/23985
- http://www.securityfocus.com/bid/17237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25430