CVE:CVE-2002-1277
CNNVD:CNNVD-200211-017
Window Maker是一款流行的桌面管理程序。
Window Maker在装载图象时使用的一个函数存在问题，远程攻击者可以利用这个漏洞构建恶意图象并诱使用户设置为背景图象而触发缓冲区溢出。
Window Maker当建立图象时会对图象长和宽相乘操作来分配缓冲区，但没有对其进行边界缓冲区检查，提供超大的图象长宽值可导致缓冲区溢出，可能以Window Maker进程权限在系统上执行任意指令。
solution:Upgrade windowmaker windowmaker to a higher version than 0.20.1.3,0.52.2,0.53,0.61,0.61.1,0.62,0.62.1,0.63,0.63.1,0.64,0.65,0.80,and avoid the version 0.20.1.3,0.52.2,0.53,0.61,0.61.1,0.62,0.62.1,0.63,0.63.1,0.64,0.65,0.80