Xi Graphics Information for VU#172583

Common Desktop Environment (CDE) Subprocess Control Service dtspcd contains buffer overflow

Status

Affected

Vendor Statement

Xi Graphics DeXtop 2.1 is vulnerable. Further information and a patch are available at the following locations:

ftp://ftp.xig.com/updates/dextop/2.1/DEX2100.012.txt

ftp://ftp.xig.com/updates/dextop/2.1/DEX2100.012.tar.gz

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.