openmotif21 stack overflows in libxpm

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include 1 multiple integer overflows, 2 out-of-bounds memory accesses, 3 directory traversal, 4 shell metacharacter, 5 endless loops, and 6 memory leaks, which could allow remote attackers to obtain...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 3. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs such as GNOME and K...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 2.1. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs, such as GNOME an...

RHEL 2.1 : XFree86 (RHSA-2004:610)

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 2.1. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs, such as GNOME an...

CVE-2004-0914

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include 1 multiple integer overflows, 2 out-of-bounds memory accesses, 3 directory traversal, 4 shell metacharacter, 5 endless loops, and 6 memory leaks, which could allow remote attackers to obtain...

CVE-2004-0914

Concrete details: CVE-2004-0914 concerns multiple vulnerabilities in libXpm (as used by XFree86/X.Org) including integer overflows, out-of-bounds reads, directory traversal, shell metacharacter issues, endless loops, and memory leaks in parsing XPM images. If exploited via a crafted XPM file, rem...

Debian DSA-607-1 : xfree86 - several vulnerabilities

Several developers have discovered a number of problems in the libXpm library which is provided by X.Org, XFree86 and LessTif. These bugs can be exploited by remote and/or local attackers to gain access to the system or to escalate their local privileges, by using a specially crafted XPM image...

[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...

DSA-607-1 xfree86 - several

Bulletin has no description...

openmotif21 stack overflows in libxpm

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...

Important: Red Hat Security Advisory: openmotif security update

Updated openmotif packages that fix flaws in the Xpm image library are now available. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. During a source code audit, Chris Evans and others discovered several stack overflow flaws and an integer overfl...

openmotif21 stack overflows in libxpm

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include 1 multiple integer overflows, 2 out-of-bounds memory accesses, 3 directory traversal, 4 shell metacharacter, 5 endless loops, and 6 memory leaks, which could allow remote attackers to obtain...

openmotif21 stack overflows in libxpm

Multiple integer overflows in 1 the xpmParseColors function in parse.c, 2 XpmCreateImageFromXpmImage, 3 CreateXImage, 4 ParsePixels, and 5 ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file...

GLSA-200411-28 : X.Org, XFree86: libXpm vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-28 X.Org, XFree86: libXpm vulnerabilities Several issues were discovered in libXpm, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop. Impact : An attacker could craft a...

X.Org, XFree86: libXpm vulnerabilities

Background libXpm is a pixmap manipulation library for the X Window System, included in both X.Org and XFree86. Description Several issues were discovered in libXpm, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop. Impact An attacker could...

Fedora Core 3 : xorg-x11-6.8.1-12.FC3.1 (2004-434)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Fedora Core 2 : xorg-x11-6.7.0-10 (2004-433)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Debian DSA-561-1 : xfree86 - integer and stack overflows

Chris Evans discovered several stack and integer overflows in the libXpm library which is provided by X.Org, XFree86 and LessTif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-561. The...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2004:124)

Chris Evans found several stack and integer overflows in the libXpm code of X.Org/XFree86 : Stack overflows CVE-2004-0687 : Careless use of strcat in both the XPMv1 and XPMv2/3 xpmParseColors code leads to a stack based overflow parse.c. Stack overflow reading pixel values in ParseAndPutPixels...