460 matches found
Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-1)
Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...
Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-92-1)
Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...
USN-83-2: LessTif 1 vulnerabilities
USN-83-1 fixed some vulnerabilities in the "lesstif2" library. The older "lesstif1" library was also affected, however, a fix was not yet available at that time. This USN fixes the flaws for lesstif1. Please note that there are no supported applications that use this library, so this only affects...
FreeBSD : gdk-pixbuf -- image decoding vulnerabilities (3d1e9267-073f-11d9-b45d-000c41e2cdad)
Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder : - Heap-based overflow in pixbufcreatefromxpm - Stack-based overflow in xpmextractcolor - Integer overflows in io-ico.c Some of these flaws are believed to be exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
FreeBSD : xpm -- image decoding vulnerabilities (ef253f8b-0727-11d9-b45d-000c41e2cdad)
Chris Evans discovered several vulnerabilities in the libXpm image decoder : - A stack-based buffer overflow in xpmParseColors - An integer overflow in xpmParseColors - A stack-based buffer overflow in ParsePixels and ParseAndPutPixels The X11R6.8.1 release announcement reads : This version is...
USN-92-1: LessTif vulnerabilities
Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...
GLSA-200501-19 : imlib2: Buffer overflows in image decoding
The remote host is affected by the vulnerability described in GLSA-200501-19 imlib2: Buffer overflows in image decoding Pavel Kankovsky discovered that several buffer overflows found in the libXpm library see GLSA 200409-34 also apply to imlib see GLSA 200412-03 and imlib2. He also fixed a number...
GLSA-200501-06 : tiff: New overflows in image decoding
The remote host is affected by the vulnerability described in GLSA-200501-06 tiff: New overflows in image decoding infamous41md found a potential integer overflow in the directory entry count routines of the TIFF library CAN-2004-1308. Dmitry V. Levin found another similar issue in the tiffdump...
tiff: New overflows in image decoding
Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description infamous41md found a potential integer overflow in the directory entry count routines o...
[Full-Disclosure] [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding
Gentoo Linux Security Advisory GLSA 200412-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
imlib: Buffer overflows in image decoding
Background imlib is an advanced replacement library for image manipulation libraries like libXpm. It is called by numerous programs, including gkrellm and several window managers, to help in displaying images. Description Pavel Kankovsky discovered that several overflows found in the libXpm libra...
GLSA-200412-03 : imlib: Buffer overflows in image decoding
The remote host is affected by the vulnerability described in GLSA-200412-03 imlib: Buffer overflows in image decoding Pavel Kankovsky discovered that several overflows found in the libXpm library see GLSA 200409-34 also applied to imlib. He also fixed a number of other potential flaws. Impact : ...
DEBIAN-CVE-2004-0782
Integer overflow in pixbufcreatefromxpm io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+...
[ GLSA 200410-11 ] tiff: Buffer overflows in image decoding
Gentoo Linux Security Advisory GLSA 200410-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200410-11 : tiff: Buffer overflows in image decoding
The remote host is affected by the vulnerability described in GLSA-200410-11 tiff: Buffer overflows in image decoding Chris Evans found heap-based overflows in RLE decoding routines in tifnext.c, tifthunder.c and potentially tifluv.c. Impact : A remote attacker could entice a user to view a...
tiff: Buffer overflows in image decoding
Background The tiff library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE, to help in displaying TIFF images. xv is a multi-format image manipulation utility that is statically linked to the tiff library...
Moderate: Red Hat Security Advisory: XFree86 security update
Updated XFree86 packages that fix several security issues in libXpm, as well as other bug fixes, are now available for Red Hat Enterprise Linux 2.1. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user...
GLSA-200409-28 : GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200409-28 GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities A vulnerability has been discovered in the BMP image preprocessor CAN-2004-0753. Furthermore, Chris Evans found a possible integer overflow in the...
gdk-pixbuf -- image decoding vulnerabilities
Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbufcreatefromxpm Stack-based overflow in xpmextractcolor Integer overflows in io-ico.c Some of these flaws are believed to be exploitable...