SUSE SLED12 / SLES12 Security Update : libXpm (SUSE-SU-2017:0467-1)

This update for libXpm fixes the following issues : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES11 Security Update : xorg-x11-libXpm (SUSE-SU-2017:0470-1)

This update for xorg-x11-libXpm fixes the following security issue : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE-SU-2017:0467-1 Security update for libXpm

This update for libXpm fixes the following issues: - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315...

libXpm Stack Buffer Overflow Vulnerability

libXpm is a library system for decoding XPM. A stack buffer overflow vulnerability exists in libXpm. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service in an affected program...

MGASA-2017-0035 Updated libxpm packages fix security vulnerability

An out of boundary write has been found in libXpm before 3.5.12 which can be exploited by an attacker through maliciously crafted XPM files. To trigger the vulnerability, a program must explicitly request to also parse XPM extensions while reading files. The motif toolkit and xdm are two among so...

Updated libxpm packages fix security vulnerability

An out of boundary write has been found in libXpm before 3.5.12 which can be exploited by an attacker through maliciously crafted XPM files. To trigger the vulnerability, a program must explicitly request to also parse XPM extensions while reading files. The motif toolkit and xdm are two among so...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

DEBIAN-CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

Integer overflow

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

ALPINE-CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

GLSA-201701-72 : libXpm: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-72 libXpm: Remote execution of arbitrary code An integer overflow was discovered in libXpms src/CrDatFrI.c file. On 64 bit systems, this allows an overflow to occur on 32 bit integers while parsing XPM extensions in a file...

libXpm: Remote execution of arbitrary code

Background The X PixMap image format is an extension of the monochrome X BitMap format specified in the X protocol, and is commonly used in traditional X applications. Description An integer overflow was discovered in libXpm’s src/CrDatFrI.c file. On 64 bit systems, this allows an overflow to occ...

Debian DLA-801-1 : libxpm security update

Tobias Stoeckmann discovered a vulnerability in the libXpm library that could cause a malicious attacker to execute arbitrary code via a specially crafted XPM file. For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.10-1+deb7u1. We recommend that you upgrade your libxpm...

CVE-2016-10164

An integer overflow flaw leading to a heap-based buffer overflow was found in libXpm. An attacker could use this flaw to crash an application using libXpm via a specially crafted XPM file...

UBUNTU-CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

USN-2987-1 GD library vulnerabilities | Cloud Foundry

USN-2987-1 GD library vulnerabilities Medium Vendor libgd2, Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into processing a speciall...

Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-2987-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2987-1 advisory. It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into...