security flaw

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

Mandrake Linux Security Advisory : gtk+ (MDKSA-2001:061-1)

A vulnerability exists with the GTK+ toolkit in that the GTKMODULES environment variable allows a local user to enter a directory path to a module that does not necessarily need to be associated with GTK+. With this, an attacker could create a custom module and load it using the toolkit which cou...

[security bulletin] SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries - elevated privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01034 REVISION: 0 SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries elevated privileges ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

HP-UX GTK+ weak permissions

World-writable directory...

Security fix for the ALT Linux 9 package wireshark version 0.9.16-alt1

Nov. 6, 2003 Alexander Bokovoy 0.9.16-alt1 - 0.9.16 - Fixed: + CAN-2003-0925 + CAN-2003-0926 + CAN-2003-0927 - Added: + --enable Master switch allows to build this package for ALT Linux Master 2.2 + Build GTK+ 2.x frontend instead of GTK+ 1.x - Updated: + PAM entry to follow current PAM policy in...

CVE-2001-0084

GTK+ library allows local users to specify arbitrary modules via the GTKMODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program...

CVE-2001-0084

The CVE-2001-0084 issue affects the GTK+ library, where the GTK_MODULES environment variable lets local users specify arbitrary modules. If GTK+ is used by a setuid/setgid program, this can let local users gain privileges. Reports from PT-2001-1319 describe GTK+ (affected versions not specified) ...

CVE-2001-0084

GTK+ library allows local users to specify arbitrary modules via the GTKMODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program...

PT-2001-1319 · Gtk · Gtk+ Library

Name of the Vulnerable Software and Affected Versions: GTK+ library affected versions not specified Description: The issue allows local users to specify arbitrary modules via the GTK MODULES environmental variable. This could potentially allow local users to gain privileges if GTK+ is used by a...

Дырка в gtk+ (GTK_MODULES)

Пользователь может указать расположение библиотек через переменную GTKMODULES...

gtk+ security hole.

while going through a quick audit of gtk i found: gtk+ can be tricked into running arbitrary code via a bogus module. this means any program using gtk that is setid can be exploited via this method. here is an exploit i wrote for this security hole: original xgtk.cworking/un-wrapped:...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

GTK+ 1.2.8 - Arbitrary Loadable Module Execution // source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The proble...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

// source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The problem occurs in the ability to load modules with the...

Linux news 09.05.00

FOR ALL Поздравляю всех с Днем Победы ! Всего вам хорошего ... и давайте все-таки не забывать наших предков ... Kernel Traffic 66 Вышел очередной выпуск Linux Kernel Traffic, обзора обсуждаемых тем в списке разработчиков ядра. Подробнее: http://kt.linuxcare.com/kernel-traffic/kt2000050766print.ep...

PT-2005-5562 · Gtk+ +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ version 2.4.0 GTK+ versions prior to 2.8.6-r1 Description: The issue is related to an integer overflow in the GTK+ gdk-pixbuf XPM image rendering library, which can lead to a heap-based buffer overflow, allowing attackers to execute...

PT-2004-3767 · Gtk+ · Gtk2 +1

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf versions prior to 0.22 gtk2 versions prior to 2.2.4 Description: The issue is related to an integer overflow in the ICO image decoder, which can be exploited by remote attackers to cause a denial of service, resulting in an...

PT-2004-3765 · Gtk+ · Gtk2 +1

Name of the Vulnerable Software and Affected Versions: gtk2 versions 2.4.4 and earlier gdk-pixbuf versions prior to 0.22 Description: The issue is related to multiple vulnerabilities in the gtk2 and gdk-pixbuf packages, which can lead to disruption of confidentiality, integrity, and availability ...

PT-2004-3766 · Suse +1 · Opensuse +2

Name of the Vulnerable Software and Affected Versions: gtk2 versions prior to 2.4.4 gdk-pixbuf versions prior to 0.22 Description: The issue affects the gtk2 and gdk-pixbuf packages in the openSUSE operating system, allowing remote exploitation that may lead to a breach of confidentiality,...

PT-2005-5561 · Gentoo +4 · Gentoo Linux +11

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf-gnome version 0.22.0 gtk2 versions prior to 2.8.7 gdk-pixbuf-devel version 0.22.0 libgtk-common affected versions not specified libgtk2.0-dbg affected versions not specified gtk2-devel affected versions not specified gtk2-doc...