133 matches found
Qt/imlib buffer overflow
Buffer overflow on BMP files paring...
ImageMagick, imlib, imlib2: BMP decoding buffer overflows
Background ImageMagick is a suite of image manipulation utilities and libraries used for a wide variety of image formats. imlib is a general image loading and rendering library. Description Due to improper bounds checking, ImageMagick and imlib are vulnerable to a buffer overflow when decoding...
FreeBSD : imlib -- BMP decoder heap buffer overflow (75)
The following package needs to be updated: imlib %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg00644f03fb5811d89837000c41e2cdad.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...
Mandrake Linux Security Advisory : imlib (MDKSA-2002:029)
Previous versions of imlib, prior to 1.9.13, would fall back to the NetPBM library which is not suitable for loading untrusted images due to various problem in it's code. The new imlib also fixes some problems with arguments passed to malloc. These problems could allow attackers to construct imag...
CVE-2002-0168
CVE-2002-0168 affects Imlib up to version 1.9.12 (before 1.9.13). The vulnerability arises from how arguments passed to malloc may cause a heap corruption, enabling a denial of service and potentially arbitrary code execution when untrusted images are loaded. Public advisories (Mandrake MDKSA-200...
CVE-2002-0167
The CVE-2002-0167 issue affects Imlib prior to 1.9.13, where loading images via NetPBM could trigger a crash or, in some cases, execute arbitrary code due to weaknesses in NetPBM. Connected Red Hat advisory RHSA-2002:048 confirms that Imlib versions before 1.9.13 fall back to NetPBM for untrusted...
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...
CVE-2002-0168
Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service crash and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption...
CVE-2002-0168
Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service crash and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption...
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...
[CLA-2002:470] Conectiva Linux Security Announcement - imlib
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : imlib SUMMARY : Potential vulnerabilities in imli...
Buffer overflows in imlib
Buffer overflow during image processing...
Important: Red Hat Security Advisory: : New imlib packages available
Updated imlib packages are now available for Red Hat Linux 6.2, 7, 7.1 and 7.2 which fix potential problems loading untrusted images. Imlib versions prior to 1.9.13 would fall back to loading images via the NetPBM package, which has various problems making it unsuitable for loading untrusted...