Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted ELF file, which leads to a heap-based buffer overflow.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

Several problems have been discovered in ht, a viewer, editor and analyser for various executables, that may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-1545     Tavis Ormandy of the Gentoo Linux Security Team     discovered an integer overflow in the ELF parser.

  - CAN-2005-1546

    The authors have discovered a buffer overflow in the PE     parser.

The remote host is affected by the vulnerability described in GLSA-200505-08 (HT Editor: Multiple buffer overflows)

    Tavis Ormandy of the Gentoo Linux Security Team discovered an integer     overflow in the ELF parser, leading to a heap-based buffer overflow.
    The vendor has reported that an unrelated buffer overflow has been     discovered in the PE parser.
  Impact :

    Successful exploitation would require the victim to open a specially     crafted file using HT, potentially permitting an attacker to execute     arbitrary code.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
18651	Debian DSA-743-1 : ht - buffer overflows, integer overflows	Nessus	Debian Local Security Checks	medium
18234	GLSA-200505-08 : HT Editor: Multiple buffer overflows	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2005-1545

high

Tenable Plugins

critical

medium

medium