CVE Catalog
CVE-1999-1483
MediumExploitation Probability (EPSS)
Low risk0.70%
48th percentile - higher than 48% of all known CVEs
Summary
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and execution of malicious code by local users.
Recommendation
It is recommended to update svgalib to a version newer than 1.2.10 and to restrict access to the HOME environment variable.
Original NVD description (English source)
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

