GLSA-200806-03 : Imlib 2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-03 Imlib 2: User-assisted execution of arbitrary code Stefan Cornelius Secunia Research reported two boundary errors in Imlib2: One of them within the load function in the file src/modules/loaders/loaderpnm.c when processin...

Imlib 2: User-assisted execution of arbitrary code

Background Imlib 2 is an advanced replacement library for libraries like libXpm. Description Stefan Cornelius Secunia Research reported two boundary errors in Imlib2: One of them within the load function in the file src/modules/loaders/loaderpnm.c when processing the header of a PNM image file,...

NASA BigView buffer overflow

PNM images parsing buffer overflow...

NASA BigView PNM文件处理栈溢出漏洞

BUGTRAQ ID: 29517 CVECAN ID: CVE-2008-2542 BigView是NASA开发的图形查看器，可在运行Linux的桌面PC上将图形拉伸和缩放到任意尺寸。 BigView在解析特制的PNM输入文件时存在栈溢出漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 以下是Ppm/ppm.C文件中的漏洞代码。这里getline函数从文件将数据读取到缓冲区： /----------- 418 static void getlineint fin, char lineBuf, int len 419 420 bool done=false; 421 in...

CVE-2008-2542

Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attackers to execute arbitrary code via a crafted PNM file...

CVE-2008-2542

CVE-2008-2542 affects NASA BigView 1.8. The vulnerability is a stack overflow in the getline path used when parsing PNM headers (lineBuf[512] in Ppm/ppm.C). A crafted PNM file can overflow the 512-byte buffer, potentially allowing arbitrary code execution. The CoreLabs advisory confirms the issue...

CVE-2008-2542

Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attackers to execute arbitrary code via a crafted PNM file...

Core Security Technologies Advisory 2008.0425

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ NASA BigView Stack Buffer Overflow Advisory Information Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:...

NASA BigView Stack Buffer Overflow

Advisory ID Internal CORE-2008-0425 Advisory Information: Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:https://www.coresecurity.com/core-labs/advisories/nasa-big-view Date published: 2008-06-04 Date of last update: 2008-06-03 Vendors contacted: NASA Ames...

CVE-2008-2426

Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...

CVE-2008-2426

Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...

CVE-2008-2426

The CVE-2008-2426 issue affects Imlib2 (imlib2) 1.4.0, where two stack-based buffer overflows in image loaders can be triggered by specially crafted PNM or XPM images. The loader_pnm.c and loader_xpm.c paths are implicated, potentially causing a crash (DoS) or arbitrary code execution upon user-a...

CVE-2008-2426

Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...

Secunia Research: imlib2 PNM and XPM Buffer Overflow

====================================================================== Secunia Research 29/05/2008 - imlib2 PNM and XPM Buffer Overflows - ====================================================================== Table of Contents Affected Software.......................................................

imlib2 library buffer overflow

Buffer overflow on PNM and XPM files parsing in load function...

netpbm security update

CentOS Errata and Security Advisory CESA-2008:0131-01 Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a...

netpbm security update

CentOS Errata and Security Advisory CESA-2008:0131 Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a...

Moderate: Red Hat Security Advisory: netpbm security update

Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions for editing and converting betwee...

RHEL 2.1 / 3 / 4 : netpbm (RHSA-2008:0131)

Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions for editing and converting betwee...

CentOS 3 / 4 : netpbm (CESA-2008:0131)

Updated netpbm packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions for editing and converting betwee...