RHEL 2.1 : XFree86 (RHSA-2004:610)

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 2.1. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs, such as GNOME an...

CVE-2004-0914

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include 1 multiple integer overflows, 2 out-of-bounds memory accesses, 3 directory traversal, 4 shell metacharacter, 5 endless loops, and 6 memory leaks, which could allow remote attackers to obtain...

CVE-2004-0914

Concrete details: CVE-2004-0914 concerns multiple vulnerabilities in libXpm (as used by XFree86/X.Org) including integer overflows, out-of-bounds reads, directory traversal, shell metacharacter issues, endless loops, and memory leaks in parsing XPM images. If exploited via a crafted XPM file, rem...

Debian DSA-607-1 : xfree86 - several vulnerabilities

Several developers have discovered a number of problems in the libXpm library which is provided by X.Org, XFree86 and LessTif. These bugs can be exploited by remote and/or local attackers to gain access to the system or to escalate their local privileges, by using a specially crafted XPM image...

[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...

DSA-607-1 xfree86 - several

Bulletin has no description...

Important: Red Hat Security Advisory: openmotif security update

Updated openmotif packages that fix flaws in the Xpm image library are now available. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. During a source code audit, Chris Evans and others discovered several stack overflow flaws and an integer overfl...

openmotif21 stack overflows in libxpm

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...

openmotif21 stack overflows in libxpm

Multiple integer overflows in 1 the xpmParseColors function in parse.c, 2 XpmCreateImageFromXpmImage, 3 CreateXImage, 4 ParsePixels, and 5 ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file...

openmotif21 stack overflows in libxpm

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include 1 multiple integer overflows, 2 out-of-bounds memory accesses, 3 directory traversal, 4 shell metacharacter, 5 endless loops, and 6 memory leaks, which could allow remote attackers to obtain...

GLSA-200411-28 : X.Org, XFree86: libXpm vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-28 X.Org, XFree86: libXpm vulnerabilities Several issues were discovered in libXpm, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop. Impact : An attacker could craft a...

X.Org, XFree86: libXpm vulnerabilities

Background libXpm is a pixmap manipulation library for the X Window System, included in both X.Org and XFree86. Description Several issues were discovered in libXpm, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop. Impact An attacker could...

Fedora Core 3 : xorg-x11-6.8.1-12.FC3.1 (2004-434)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Fedora Core 2 : xorg-x11-6.7.0-10 (2004-433)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Debian DSA-561-1 : xfree86 - integer and stack overflows

Chris Evans discovered several stack and integer overflows in the libXpm library which is provided by X.Org, XFree86 and LessTif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-561. The...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2004:124)

Chris Evans found several stack and integer overflows in the libXpm code of X.Org/XFree86 : Stack overflows CVE-2004-0687 : Careless use of strcat in both the XPMv1 and XPMv2/3 xpmParseColors code leads to a stack based overflow parse.c. Stack overflow reading pixel values in ParseAndPutPixels...

CVE-2004-0687

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...

CVE-2004-0688

Multiple integer overflows in 1 the xpmParseColors function in parse.c, 2 XpmCreateImageFromXpmImage, 3 CreateXImage, 4 ParsePixels, and 5 ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file...

CVE-2004-0687

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...