RHEL 2.1 / 3 : imlib (RHSA-2004:465)

An updated imlib package that fixes several heap overflows is now available. Imlib is an image loading and rendering library. Several heap overflow flaws were found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it could cause an applicati...

Fedora Core 2 : imlib-1.9.13-19 (2004-301)

Several heap overflow vulnerabilities have been found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities...

Fedora Core 1 : imlib-1.9.13-15.fc1 (2004-300)

Several heap overflow vulnerabilities have been found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities...

GLSA-200409-12 : ImageMagick, imlib, imlib2: BMP decoding buffer overflows

The remote host is affected by the vulnerability described in GLSA-200409-12 ImageMagick, imlib, imlib2: BMP decoding buffer overflows Due to improper bounds checking, ImageMagick and imlib are vulnerable to a buffer overflow when decoding runlength-encoded bitmaps. This bug can be exploited usin...

Qt/imlib buffer overflow

Buffer overflow on BMP files paring...

[Full-Disclosure] MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: imlib2 Advisory ID: MDKSA-2004:089 Date: September 7th, 2004 Affected versions: 10.0, 9.2, Corporate Server 2.1 Problem Description: Marcus Meissner discovered that the imlib and imlib2 libraries ar...

ImageMagick, imlib, imlib2: BMP decoding buffer overflows

Background ImageMagick is a suite of image manipulation utilities and libraries used for a wide variety of image formats. imlib is a general image loading and rendering library. Description Due to improper bounds checking, ImageMagick and imlib are vulnerable to a buffer overflow when decoding...

FreeBSD : imlib -- BMP decoder heap buffer overflow (75)

The following package needs to be updated: imlib %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg00644f03fb5811d89837000c41e2cdad.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

Mandrake Linux Security Advisory : imlib (MDKSA-2002:029)

Previous versions of imlib, prior to 1.9.13, would fall back to the NetPBM library which is not suitable for loading untrusted images due to various problem in it's code. The new imlib also fixes some problems with arguments passed to malloc. These problems could allow attackers to construct imag...

CVE-2002-0168

CVE-2002-0168 affects Imlib up to version 1.9.12 (before 1.9.13). The vulnerability arises from how arguments passed to malloc may cause a heap corruption, enabling a denial of service and potentially arbitrary code execution when untrusted images are loaded. Public advisories (Mandrake MDKSA-200...

CVE-2002-0167

The CVE-2002-0167 issue affects Imlib prior to 1.9.13, where loading images via NetPBM could trigger a crash or, in some cases, execute arbitrary code due to weaknesses in NetPBM. Connected Red Hat advisory RHSA-2002:048 confirms that Imlib versions before 1.9.13 fall back to NetPBM for untrusted...

CVE-2002-0168

Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service crash and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption...

CVE-2002-0167

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...

CVE-2002-0167: Undefined Security Weakness

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...

CVE-2002-0168: Undefined Security Weakness

Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service crash and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption...

CVE-2002-0168

Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service crash and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption...

CVE-2002-0167

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...

[CLA-2002:470] Conectiva Linux Security Announcement - imlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : imlib SUMMARY : Potential vulnerabilities in imli...

Buffer overflows in imlib

Buffer overflow during image processing...

Important: Red Hat Security Advisory: : New imlib packages available

Updated imlib packages are now available for Red Hat Linux 6.2, 7, 7.1 and 7.2 which fix potential problems loading untrusted images. Imlib versions prior to 1.9.13 would fall back to loading images via the NetPBM package, which has various problems making it unsuitable for loading untrusted...