xloadimage 4.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3006/info // // xloadimage is a utility used for displaying images of varying formats on X11 servers. // // xloadimage and possibly derivatives such as 'xli' contain a buffer overflow vulnerability in the handling of the 'Faces Project' image type. // ...

[RHSA-2001:088-04] New xloadimage packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New xloadimage packages available Advisory ID: RHSA-2001:088-04 Issue date: 2001-06-28 Updated on: 2001-07-09 Product: Red Hat Linux Keywords: xloadimage tif faces plugger...

Important: Red Hat Security Advisory: : New xloadimage packages available

These updated packages fix a buffer overflow in the faces reader. This is normally not a security problem; however, xloadimage is called by the 'plugger' program from inside Netscape to handle some image types. Hence, a remote site could cause arbitrary code to be executed as the user running...

xloadimage -- buffer overflow in FACES image handling

In 2001, zen-parse discovered a buffer overflow in xloadimage's FACES image loader. A maliciously crafted image could cause xloadimage to execute arbitrary code. A published exploit exists for this vulnerability. In 2005, Rob Holland discovered that the same vulnerability was present in xli...