Moderate: libgsf security update

1.10.1-2 - Resolves: rhbz217949 CVE-2006-4514...

GLSA-200612-13 : libgsf: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-13 libgsf: Buffer overflow 'infamous41md' has discovered that the 'oleinitinfo' function may allocate too little memory for storing the contents of an OLE document, resulting in a heap buffer overflow. Impact : An attacker...

libgsf: Buffer overflow

Background The GNOME Structured File Library is an I/O library that can read and write common file types and handle structured formats that provide file-system-in-a-file semantics. Description "infamous41md" has discovered that the "oleinitinfo" function may allocate too little memory for storing...

LibGSF程序库远程堆溢出漏洞

GNOME结构化文件库（LibGSF）是用于读写结构化文件格式的工具库。 多家厂商的操作系统中所捆绑的libgsf库的oleinitinfo函数中存在堆溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 在分配内存时oleinitinfo函数仅获得了numbat中所指定数目的空间，然后在读取文件内容时nummetabat中所指定的数目被用作了循环的边界。由于没有充分地验证变量，因此攻击者可能通过诱骗用户打开特制的OLE文档触发堆溢出，导致执行任意指令。 Jody Goldberg libgsf 1.14.1 Jody Goldberg libgsf 1.14 Jody...

LibGSF远程堆溢出漏洞

GNOME Structured File Library是一款勇于读取和写结构文件格式的工具库 GNOME Structured File Library存在堆溢出问题，远程攻击者可以利用漏洞以链接此库的应用程序进程权限执行任意指令。 问题存在于'oleinitinfo'函数中，此函数当分配内存时只分配'numbat'指定的数目大小，当读取文件内容时，'nummetabat'指定的数目用于循环的边界，由于不正确的对变量进行验证，可导致堆溢出，精心构建恶意文件内容。诱使用户解析，可以链接此库的应用程序进程权限执行任意指令。 libgsf libgsf 1.14.1 libgsf libg...

USN-391-1: libgsf vulnerability

A heap overflow was discovered in the OLE processing code in libgsf. If a user were tricked into opening a specially crafted OLE document, an attacker could execute arbitrary code with the user's privileges...

libgsf buffer overflow

oleinitinfo heap overflow...

CVE-2006-4514

CVE-2006-4514 affects GNOME Structured File Library (libgsf) 1.14.0 and earlier than 1.14.2. The vulnerability is a heap-based buffer overflow in ole_info_read_metabat that, due to insufficient memory allocation in ole_init_info when handling large num_metabat values in OLE documents, can allow c...

CVE-2006-4514

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

[SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1221-1 [email protected] http://www.debian.org/security/ Martin Schulze November 30th, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1221-1 [email protected] http://www.debian.org/security/ Martin Schulze November 30th, 2006 http://www.debian.org/security/faq -...

DSA-1221-1 libgsf

Bulletin has no description...

Debian DSA-1221-1 : libgsf - buffer overflow

'infamous41md' discovered a heap buffer overflow vulnerability in libgsf, a GNOME library for reading and writing structured file formats, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

security flaw

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...

CVE-2006-3376

CVE-2006-3376 is an integer overflow in libwmf 0.2.8.4 (and older) related to the MaxRecordSize header in WMF files that enables remote code execution or crash when processing crafted WMF data. Affected software range includes libwmf and its use in wv, abiword, freetype, gimp, libgsf, and imagema...