CVE-2001-0775

xli 1.16-1.17 - Buffer Overflow via FACES Format Image Long Name Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0775. PoCs published by zenith parsec.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in xloadimage (CVE-2001-0775) by crafting a malicious 'Faces Project' image file. It includes shellcode to bind a shell to port 7465, demonstrating remote code execution (RCE) capabilities.

Description

Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.

Exploits (1)

exploitdb WORKING POC VERIFIED

by zenith parsec · cremotelinux

https://www.exploit-db.com/exploits/20998

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in xloadimage (CVE-2001-0775) by crafting a malicious 'Faces Project' image file. It includes shellcode to bind a shell to port 7465, demonstrating remote code execution (RCE) capabilities.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: xloadimage and derivatives (e.g., xli)

No auth needed

Prerequisites: Victim must open the malicious image file, either directly or via a vulnerable plugin (e.g., Netscape plugin or plugger)

MITRE ATT&CK