Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : XV (SSA:2005-195-02)

New XV image viewer packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Format string and other issues could cause a crash or execution of arbitrary code if a specially crafted image is loaded with XV. %NASLMINLEVEL 70300 C Tenable Network Security...

XV

New XV image viewer packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Format string and other issues could cause a crash or execution of arbitrary code if a specially crafted image is loaded with XV. Here are the details from the Slackware 10.1...

FreeBSD : xv -- filename handling format string vulnerability (a4bd3039-9a48-11d9-a256-0001020eed82)

A Gentoo Linux Security Advisory reports : Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the handling of image filenames by xv. Successful exploitation would require a victim to process a specially crafted image with a malformed filename, potentially resulting in the...

FreeBSD : xv (1551)

The following package needs to be updated: xv %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScript,...

XV: Multiple vulnerabilities

Background XV is an interactive image manipulation program for the X Window System. Description Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS Planetary Data...

GLSA-200504-17 : XV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-17 XV: Multiple vulnerabilities Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS Planetar...

CVE-2005-0665

Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename...

CVE-2005-0665

The CVE-2005-0665 entry describes a format-string vulnerability in xv (pre-3.10a) that lets remote attackers execute arbitrary code via crafted filenames. Root cause: processing of format specifiers in filenames. Impact: arbitrary code execution on affected xv deployments. Remediation: upgrade to...

CVE-2005-0665: Undefined Security Weakness

Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename...

CVE-2004-1725

The CVE-2004-1725 entry describes a stack-based buffer overflow in xvbmp.c within XV that allows remote attackers to execute arbitrary code via a crafted image file. Connected sources confirm the affected component is XV and specify xvbmp.c as the vulnerable module, with the vulnerability enablin...

CVE-2004-1726

The CVE-2004-1726 vulnerability affects XV, with multiple integer overflows in xviris.c, xvpcx.c, and xvpm.c that can be triggered by a crafted image file, causing a heap-based buffer overflow and remote code execution as described in multiple sources (NVD/SUSE/CVE records). The provided document...

CVE-2004-1725

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file...

CVE-2004-1725: Undefined Security Weakness

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file...

CVE-2004-1726: Undefined Security Weakness

Multiple integer overflows in 1 xviris.c, 2 xvpcx.c, and 3 xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow...

CVE-2004-1725

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file...

xv: Buffer overflows in image handling

Background xv is a multi-format image manipulation utility. Description Multiple buffer overflow and integer handling vulnerabilities have been discovered in xv's image processing code. These vulnerabilities have been found in the xvbmp.c, xviris.c, xvpcx.c and xvpm.c source files. Impact An...

XV 3.x - .BMP Parsing Local Buffer Overflow

XV 3.x - .BMP Parsing Local Buffer Overflow / xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align...

XV 3.x - '.BMP' Parsing Local Buffer Overflow

/ xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align n00batlocalho.outernet ./a.out 0xbffff388...