gtk+ security hole.

while going through a quick audit of gtk i found: gtk+ can be tricked into running arbitrary code via a bogus module. this means any program using gtk that is setid can be exploited via this method. here is an exploit i wrote for this security hole: original xgtk.cworking/un-wrapped:...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

// source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The problem occurs in the ability to load modules with the...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

GTK+ 1.2.8 - Arbitrary Loadable Module Execution // source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The proble...

Linux news 09.05.00

FOR ALL Поздравляю всех с Днем Победы ! Всего вам хорошего ... и давайте все-таки не забывать наших предков ... Kernel Traffic 66 Вышел очередной выпуск Linux Kernel Traffic, обзора обсуждаемых тем в списке разработчиков ядра. Подробнее: http://kt.linuxcare.com/kernel-traffic/kt2000050766print.ep...

PT-2005-5562 · Gtk+ +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ version 2.4.0 GTK+ versions prior to 2.8.6-r1 Description: The issue is related to an integer overflow in the GTK+ gdk-pixbuf XPM image rendering library, which can lead to a heap-based buffer overflow, allowing attackers to execute...

PT-2004-3767 · Gtk+ · Gtk2 +1

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf versions prior to 0.22 gtk2 versions prior to 2.2.4 Description: The issue is related to an integer overflow in the ICO image decoder, which can be exploited by remote attackers to cause a denial of service, resulting in an...

PT-2004-3765 · Gtk+ · Gtk2 +1

Name of the Vulnerable Software and Affected Versions: gtk2 versions 2.4.4 and earlier gdk-pixbuf versions prior to 0.22 Description: The issue is related to multiple vulnerabilities in the gtk2 and gdk-pixbuf packages, which can lead to disruption of confidentiality, integrity, and availability ...

PT-2004-3766 · Suse +1 · Opensuse +2

Name of the Vulnerable Software and Affected Versions: gtk2 versions prior to 2.4.4 gdk-pixbuf versions prior to 0.22 Description: The issue affects the gtk2 and gdk-pixbuf packages in the openSUSE operating system, allowing remote exploitation that may lead to a breach of confidentiality,...

PT-2005-5561 · Gentoo +4 · Gentoo Linux +11

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf-gnome version 0.22.0 gtk2 versions prior to 2.8.7 gdk-pixbuf-devel version 0.22.0 libgtk-common affected versions not specified libgtk2.0-dbg affected versions not specified gtk2-devel affected versions not specified gtk2-doc...