CVE-2013-5447

Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.

🔗 References (12)

• psirt@ushttp://packetstormsecurity.com/files/124658
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg1LO78184
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg21657500
• psirt@ushttp://www.exploit-db.com/exploits/30789
• psirt@ushttp://www.zerodayinitiative.com/advisories/ZDI-13-274/
• psirt@ushttps://exchange.xforce.ibmcloud.com/vulnerabilities/87911
• af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/124658
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg1LO78184
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21657500
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/30789
• af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-13-274/
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/87911