VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 1, 2009· Updated Apr 23, 2026

CVE-2009-2286

CVE-2009-2286

Description

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch.

Affected products

4
  • James Ashton/Compface4 versions
    cpe:2.3:a:james_ashton:compface:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:james_ashton:compface:*:*:*:*:*:*:*:*range: <=1.5.2
    • cpe:2.3:a:james_ashton:compface:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:james_ashton:compface:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:james_ashton:compface:1.5.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.