GLib: Execution of arbitrary code

Background The GLib is a library of C routines that is used by a multitude of programs. Description Diego E. Petteno reported multiple integer overflows in glib/gbase64.c when converting a long string from or to a base64 representation. Impact A remote attacker could entice a user or automated...

RedHat Security Advisory RHSA-2009:0336

The remote host is missing updates announced in advisory RHSA-2009:0336. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop,...

RedHat Security Advisory RHSA-2009:0336

The remote host is missing updates announced in advisory RHSA-2009:0336. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop,...

RHEL 5 : glib2 (RHSA-2009:0336)

Updated glib2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOM...

glib2: integer overflows in the base64 handling functions (oCERT-2008-015)

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

Moderate: Red Hat Security Advisory: glib2 security update

Updated glib2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOM...

Ubuntu: Security Advisory (USN-738-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-738-1: GLib vulnerability

Diego Petteno discovered that the Base64 encoding functions in GLib did not properly handle large strings. If a user or automated system were tricked into processing a crafted Base64 string, an attacker could possibly execute arbitrary code with the privileges of the user invoking the program...

glib library memory corruption

Memory corruption on base64 encoding/decoding...

[oCERT-2008-015] glib and glib-predecessor heap overflows

2008-015 glib and glib-predecessors heap overflows Description: Base64 encoding and decoding functions in glib suffer from vulnerabilities during memory allocation which may result in arbitrary code execution when processing large strings. A number of other GNOME-related applications which predat...

DEBIAN-CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

Integer overflow

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

CVE-2008-4316

CVE-2008-4316 : GLib contains multiple integer overflows in the Base64 handling code (glib/gbase64.c) in GLib prior to 2.20. A long string converted to or from base64 can allow a context-dependent attacker to execute arbitrary code. Various advisories (e.g., GLib/GNU releases and distributions su...

CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

GNOME glib Base64编码解码多个整数溢出漏洞

BUGTRAQ ID: 34100 CVECAN ID: CVE-2008-4316,CVE-2009-0586,CVE-2009-0587,CVE-2009-0585 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库的Base64编码解码函数在处理超长字符串时没有正确地分配内存，在所有情况下都会使用用户提供值所计算出的长度分配堆内存： gmallocusersuppliedlength 3 / 4 + somesmallnum 由于算术运算的评估次序，长度在除以4之前首先乘以3，因此用于分配长度的计算参数可能溢出，导致分配不足的区域...

Fedora Update for glib2 FEDORA-2007-2944

Check for the Version of glib2 OpenVAS Vulnerability Test Fedora Update for glib2 FEDORA-2007-2944 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...