Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 12/11/2009 - Gimp BMP Image Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

GIMP BMP图形解析整数溢出漏洞

BUGTRAQ ID: 37006 CVE ID: CVE-2009-1570 GIMP是GNU Image Manipulation Program（GNU图像处理程序）的缩写，是一款跨平台的图像处理软件。 GIMP的plug-ins/file-bmp/bmp-read.c文件中的ReadImage函数存在最终可导致堆溢出的整数溢出漏洞。如果用户受骗打开了特制的BMP文件，就可能触发这个溢出，导致执行任意代码。 GIMP 2.6.7 厂商补丁： GIMP ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RedHat Security Advisory RHSA-2009:0457

The remote host is missing updates announced in advisory RHSA-2009:0457. libwmf is a library for reading and converting Windows Metafile Format WMF vector graphics. libwmf is used by applications such as GIMP and ImageMagick. A pointer use-after-free flaw was found in the GD graphics library...

RHEL 4 / 5 : libwmf (RHSA-2009:0457)

Updated libwmf packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libwmf is a library for reading and converting Windows Metafile Format WMF vector...

Moderate: Red Hat Security Advisory: libwmf security update

Updated libwmf packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libwmf is a library for reading and converting Windows Metafile Format WMF vector...

[ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200904-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

LittleCMS: Multiple vulnerabilities

Background LittleCMS, or short lcms, is a color management system for working with ICC profiles. It is used by many applications including GIMP and Firefox. Description RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google...

Mandriva Update for gimp MDKSA-2007:108 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:108 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for ia_ora-gnome MDKA-2007:125 (ia_ora-gnome)

Check for the Version of iaora-gnome OpenVAS Vulnerability Test Mandriva Update for iaora-gnome MDKA-2007:125 iaora-gnome Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for gtk+2.0 MDKSA-2007:039 (gtk+2.0)

Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKSA-2007:039 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for gimp MDKA-2007:024 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKA-2007:024 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for gimp MDKSA-2007:108 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:108 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for ia_ora-gnome MDKA-2007:125 (ia_ora-gnome)

Check for the Version of iaora-gnome OpenVAS Vulnerability Test Mandriva Update for iaora-gnome MDKA-2007:125 iaora-gnome Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for gimp MDKA-2007:024 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKA-2007:024 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for gimp MDKSA-2007:170 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:170 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

LittleCms integer overflow

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

CVE-2009-0581

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...

Stack overflow

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for th...

Memory corruption

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...

CVE-2009-0581

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...