CVE-2009-2286

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-01 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch.

Affected products

James Ashton Compface: through 1.5.2; 1.4, 1.5, 1.5.1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973
http://www.openwall.com/lists/oss-security/2009/06/29/2
http://www.openwall.com/lists/oss-security/2009/06/29/4
http://www.openwall.com/lists/oss-security/2009/07/03/1
http://www.securityfocus.com/bid/35863
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973
http://www.openwall.com/lists/oss-security/2009/06/29/2
http://www.openwall.com/lists/oss-security/2009/06/29/4
http://www.openwall.com/lists/oss-security/2009/07/03/1
http://www.securityfocus.com/bid/35863

Get alerted when CVE-2009-2286 or the next vulnerability affects your stack