Gentoo Security Advisory GLSA 200504-22 (KDE)

The remote host is missing updates announced in advisory GLSA 200504-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : ImageMagick (ImageMagick-5277)

ImageMagick is affected by two security problems : CVE-2008-1096: Buffer overflow in the handling of XCF files CVE-2008-1097: Heap buffer overflow in the handling of PCX files %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...

ImageMagick XCF及PCX文件处理堆溢出漏洞

BUGTRAQ ID: 28822,28821 CVECAN ID: CVE-2008-1097,CVE-2008-1096 ImageMagick是一款Unix/Linux平台下开源的图像查看和编辑工具。 ImageMagick解析XCF文件的方式存在堆溢出漏洞，如果打开了特制的XCF图形的话，ImageMagick就可能覆盖所分配内存区域之外的堆内存，这可能允许攻击者在运行ImageMagick的机器上执行任意指令。 ImageMagick处理某些畸形PCX图形的方式存在堆溢出漏洞，如果受害用户打开了特制的PCX文件的话，攻击者就可以在受害用户机器上执行任意指令。 ImageMagi...

RHEL 3 / 4 / 5 : ImageMagick (RHSA-2008:0145)

Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2008:0145 Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagic...

Memory corruption in ImageMagick's PCX coder

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

Memory corruption in ImageMagick's PCX coder

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

DEBIAN-CVE-2008-1097

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

Heap overflow

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

CVE-2008-1097

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

CVE-2008-1097

CVE-2008-1097 is a heap-based buffer overflow in ImageMagick (PCX coder) and GraphicsMagick ReadPCXImage that allows a user-assisted remote attacker to crash the process or possibly execute arbitrary code via a crafted PCX file. Affected: ImageMagick 6.2.4-5, 6.2.8-0 and GraphicsMagick 1.1.7; roo...

CVE-2008-1097

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

CVE-2008-1097

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

Gimp image loader multiple input validation flaws

The 1 psp aka .tub, 2 bmp, 3 pcx, and 4 psd plugins in gimp allow user-assisted remote attackers to cause a denial of service crash or memory consumption via crafted image files, as discovered using the fusil fuzzing tool...

Moderate: gimp security update

1.2.3-20.9.el3 - validate bytesperline header field when loading PCX files 247570 1.2.3-20.8.el3 - reduce GIMPMAXIMAGESIZE to 2^18 to detect bogus image widths/heights 247570 1.2.3-20.7.el3 - replace gimperror by gimpmessage/gimpquit in a few plugins so they don't crash but gracefully exit when...

Mandrake Linux Security Advisory : gimp (MDKSA-2007:170)

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files. CVE-2006-4519 Integer overflow in the seektoandunpackpixeldata...

CVE-2007-3741

The CVE-2007-3741 entry relates to The GIMP, specifically its image loaders in the psp (aka .tub), bmp, pcx, and psd plugins. The vulnerability allows user-assisted remote attackers to cause a denial of service (crash or memory consumption) by feeding crafted image files, as identified using fuzz...

Ubuntu 5.04 : kdelibs fixed packages (USN-114-2)

USN-114-1 fixed a vulnerability in the PCX decoder of kimgio. Unfortunately it was discovered that the original patches were faulty and caused regressions. This update now has the correct patches. This update also fixes the disappearing KDE settings which were caused by the accidental removal of...

Ubuntu 5.04 : kdelibs vulnerability (USN-114-1)

Bruno Rohee discovered a buffer overflow in the PCX decoder of kimgio. If an attacker tricked a user into loading a malicious PCX image with a KDE application, he could exploit this to execute arbitrary code with the privileges of the user opening the image. Note that Tenable Network Security has...