Important: Red Hat Security Advisory: gdk-pixbuf security update

Updated gdk-pixbuf packages that fix several security flaws are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. Updated 15th September 2004 Packages have been updated to correct a bug which caused the xpm loader to fail. During...

security flaw

Integer overflow in pixbufcreatefromxpm io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+...

security flaw

Stack-based buffer overflow in xpmextractcolor io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in a...

RHEL 2.1 / 3 : gdk-pixbuf (RHSA-2004:447)

Updated gdk-pixbuf packages that fix several security flaws are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. Updated 15th September 2004 Packages have been updated to correct a bug which caused the xpm loader to fail. During...

Fedora Core 2 : gtk2-2.4.7-2.4 (2004-289)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...

Fedora Core 1 : gtk2-2.2.4-10 (2004-288)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...

[SECURITY] [DSA 542-1] New Qt packages fix arbitrary code execution and denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 542-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0692

CVE-2004-0692 is a denial-of-service vulnerability in the XPM image parser of the Qt3 library prior to 3.3.3. The issue arises from a malformed image file that triggers a null dereference, causing the application to crash. Affected products/contexts include Qt3 deployments (Qt3 library) used by L...

CVE-2004-0692

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

CVE-2004-0692: Undefined Security Weakness

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

Fedora Core 1 : qt-3.1.2-14.2 (2004-270)

During a security audit, Chris Evans discovered a heap overflow in the BMP image decoder in Qt versions prior to 3.3.3. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with Qt to crash or possibly execute arbitrary code when the file w...

Mandrake Linux Security Advisory : qt3 (MDKSA-2004:085)

Chris Evans discovered a heap-based overflow in the QT library when handling 8-bit RLE encoded BMP files. This vulnerability could allow for the compromise of the account used to view or browse malicious BMP files. On subsequent investigation, it was also found that the handlers for XPM, GIF, and...

security flaw

The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...

PT-2004-3765 · Gtk+ · Gtk2 +1

Name of the Vulnerable Software and Affected Versions: gtk2 versions 2.4.4 and earlier gdk-pixbuf versions prior to 0.22 Description: The issue is related to multiple vulnerabilities in the gtk2 and gdk-pixbuf packages, which can lead to disruption of confidentiality, integrity, and availability ...

PT-2005-5562 · Gtk+ +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ version 2.4.0 GTK+ versions prior to 2.8.6-r1 Description: The issue is related to an integer overflow in the GTK+ gdk-pixbuf XPM image rendering library, which can lead to a heap-based buffer overflow, allowing attackers to execute...

PT-2004-3766 · Suse +1 · Opensuse +2

Name of the Vulnerable Software and Affected Versions: gtk2 versions prior to 2.4.4 gdk-pixbuf versions prior to 0.22 Description: The issue affects the gtk2 and gdk-pixbuf packages in the openSUSE operating system, allowing remote exploitation that may lead to a breach of confidentiality,...

PT-2010-5624 · Netpbm +1 · Netpbm +1

Name of the Vulnerable Software and Affected Versions: netpbm versions prior to 10.47.07 netpbm versions prior to 10.49.00 Description: The issue involves multiple vulnerabilities in the netpbm package, which can lead to disruption of confidentiality, integrity, and availability of protected...

PT-2005-5561 · Gentoo +4 · Gentoo Linux +11

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf-gnome version 0.22.0 gtk2 versions prior to 2.8.7 gdk-pixbuf-devel version 0.22.0 libgtk-common affected versions not specified libgtk2.0-dbg affected versions not specified gtk2-devel affected versions not specified gtk2-doc...