Date: 26 Nov 2004 18:48:16 -0000
From: Quith <quith@linux-hell.net.>
To: bugtraq@securityfocus.com
Subject: FluxBox crash vulnerability
Name: FluxBox
Homepage: http://www.fluxbox.org
Author: Quith <quith[at]linux-hell[dot]net>
Date: Fri Nov 26 15:07:30 UTC 2004
ISSUE:
FluxBox is a popular window manager for X, working under Linux/Unix operating systems. It's based on BlackBox and has 100% theme/style compability.
(Xman is a manual page browser for the X Window Systems.)
DESCRIPTION:
Fluxbox always crashes totally while executing XMAN with long value of
'-title' parameter. Simple usage example:
$ xman -title `perl -e 'print "X" x 10000 '`
It was tested on 0.9.10 version and some older ones. Probably all are affected.
------------------------------
Quith <quith@linux-hell.net.>
http://www.quith.info
