Threats tagged 'ghsa-8g4r-mwj3-fw99'

Fluxbox versions through 1.3.7 have an infinite loop vulnerability in the Menu::updateMenu() function. This flaw allows attackers to cause the window manager to hang by supplying a crafted style with an oversized unbounded menu.titleHeight, resulting in a non-terminating column loop. The attack leads to sustained CPU usage and denial of service during startup.