ROS-20230124-05

A vulnerability in the X Pixmap (XPM) libXpm image file library is related to an infinite loop when processing unclosed comments in XPM images in the ParseComment ( ) function.
loop when processing unclosed comments in XPM images in the ParseComment ( ) function. Exploitation
The vulnerability could allow an attacker acting remotely to open a specially crafted XPM file and
perform a denial of service (DoS) attack.

A vulnerability in the X Pixmap image file (XPM) library libXpm is related to an infinite
loop in the ParsePixels ( ) function when processing XPM files with width set to 0 and a very large height value.
height value. Exploitation of the vulnerability could allow an attacker acting remotely to open a specially crafted XPM file and execute it.
a specially crafted XPM file and perform a denial of service (DoS) attack.

The vulnerability in the X Pixmap image file (XPM) library libXpm is related to the fact that the
library uses the $PATH variable to run the command responsible for unpacking .Z or .gz
files. Exploiting the vulnerability could allow an attacker to execute arbitrary code with elevated
privileges