PatchTheCVEvilistextum vulnerabilities and fixes
Recent CVEs affecting vilistextum, with upgrade or downgrade steps. 3 tracked.
vilistextum has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-11-03. Highest priority: CVE-2004-1299 (score 64/100).
- CVE-2006-5657 HIGH 10.0 UPGRADE Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.
- CVE-2006-5656 MEDIUM 5.0 DOWNGRADE Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to ca
- CVE-2004-1299 HIGH 10.0 DOWNGRADE Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute ar
FAQ
How do I fix vilistextum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vilistextum being exploited right now?
None of the tracked vilistextum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vilistextum CVE should I patch first?
CVE-2004-1299 currently ranks highest (64/100): Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute ar.