Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)

A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image...

Ubuntu 4.10 : imlib2 vulnerabilities (USN-55-1)

Recently, Pavel Kankovsky discovered several buffer overflows in imlib which were fixed in USN-53-1. It was found that imlib2 was vulnerable to similar issues. If an attacker tricked a user into loading a malicious XPM or BMP image, he could exploit this to execute arbitrary code in the context o...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-2)

USN-83-1 fixed some vulnerabilities in the 'lesstif2' library. The older 'lesstif1' library was also affected, however, a fix was not yet available at that time. This USN fixes the flaws for lesstif1. Please note that there are no supported applications that use this library, so this only affects...

[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...

DSA-913-1 gdk-pixbuf - several

Bulletin has no description...

DSA-911-1 gtk+2.0 - several

Bulletin has no description...

[SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 911-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 911-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2005 http://www.debian.org/security/faq -...

Fedora Core 4 : gtk2-2.6.10-2.fc4.4 (2005-1088)

The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...

SUSE-SA:2005:065: gtk2, gdk-pixbuf

The remote host is missing the patch for the advisory SUSE-SA:2005:065 gtk2, gdk-pixbuf. The image loading library of the gdk-pixbug/gtk2 package is vulnerable to several security-related bugs. This makes every application mostly GNOME applications which is linked against this library vulnerable...

RHEL 3 / 4 : gtk2 (RHSA-2005:811)

Updated gtk2 packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A...

RHEL 2.1 / 3 / 4 : gdk-pixbuf (RHSA-2005:810)

Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...

Fedora Core 3 : gtk2-2.4.14-4.fc3.3 (2005-1087)

The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...

GLSA-200511-14 : GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-14 GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities iDEFENSE reported a possible heap overflow in the XPM loader CVE-2005-3186. Upon further inspection, Ludwig Nussel discovered two additional issues in the XPM...

Fedora Core 4 : gdk-pixbuf-0.22.0-18.fc4.2 (2005-1085)

The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was found in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execut...

CVE-2005-3186

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow...

CVE-2005-2975

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...

CVE-2005-3186

CVE-2005-3186 describes a heap-based buffer overflow in GTK+ gdk-pixbuf’s XPM image reader caused by an integer overflow when processing certain XPM files with many colors. The result is arbitrary code execution in affected environments. Connected advisories confirm the vulnerability affects gdk-...

CVE-2005-2976

Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service crash or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186...