Moderate: Red Hat Security Advisory: dia security update

An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. infamous41md discovered three buffer overfl...

GLSA-200604-14 : Dia: Arbitrary code execution through XFig import

The remote host is affected by the vulnerability described in GLSA-200604-14 Dia: Arbitrary code execution through XFig import infamous41md discovered multiple buffer overflows in Dia's XFig file import plugin. Impact : By enticing a user to import a specially crafted XFig file into Dia, an...

[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1025-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2006 http://www.debian.org/security/faq -...

DSA-1025-1 dia - programming error

Bulletin has no description...

Ubuntu 4.10 / 5.04 / 5.10 : dia vulnerabilities (USN-266-1)

Three buffer overflows were discovered in the Xfig file format importer. By tricking a user into opening a specially crafted .fig file with dia, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...

Mandrake Linux Security Advisory : dia (MDKSA-2006:062)

Three buffer overflows were discovered by infamous41md in dia's xfig import code. This could allow for user-complicit attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid color index, number of points, or depth. Updated packages have been patched to correct...

USN-266-1: dia vulnerabilities

Three buffer overflows were discovered in the Xfig file format importer. By tricking a user into opening a specially crafted .fig file with dia, an attacker could exploit this to execute arbitrary code with the user's privileges...

dia -- XFig Import Plugin Buffer Overflow

Secunia reports: Some vulnerabilities have been reported in Dia, which potentially can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to boundary errors within the XFig import plugin. This can be exploited to cause buffer overflows and may allow...

Buffer overflow

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

DEBIAN-CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

CVE-2006-1550

CVE-2006-1550 affects Dia’s xfig import path (xfig-import.c) in Dia 0.87 and newer up to 0.95-pre6, due to multiple buffer overflow flaws triggered by crafted xfig files. Reported vectors involve invalid color index, point count, or depth values. Public advisories (Debian DSA-1025-1, RHSA-2006:02...

CVE-2006-1550

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

Dia biffer overflow

Buffer overflow on XFig import...

Buffer overflows in Dia XFig import

A security review kindly performed by infamous41md has turned up three buffer overflow vulnerabilities in the XFig import plug-in in Dia, a diagramming tool for Gtk that runs on both Winddows and Unix. While the XFig format is not the native format of Dia, a specially crafted XFig file could caus...