CVE Catalog

CVE-1999-1483

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.70%

48th percentile - higher than 48% of all known CVEs

Summary

Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and execution of malicious code by local users.

Recommendation

It is recommended to update svgalib to a version newer than 1.2.10 and to restrict access to the HOME environment variable.

Original NVD description (English source)

Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS