CVE-2002-1277: Windowmaker

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer.

Affected products

• Windowmaker Windowmaker: version 0.20.1.3 only; version 0.52.2 only; version 0.53 only; version 0.61 only; version 0.61.1 only; version 0.62 only; …

Published 2002-11-12. Last modified 2026-06-16.