CentOS 3 / 4 : openmotif (CESA-2005:412)

Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-92-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 / 5.04 / 5.10 : gtk+2.0, gdk-pixbuf vulnerabilities (USN-216-1)

Two integer overflows have been discovered in the XPM image loader of the GDK pixbuf library. By tricking an user into opening a specially crafted XPM image with any Gnome desktop application that uses this library, this could be exploited to execute arbitrary code with the privileges of the user...

Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)

A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image...

Ubuntu 4.10 : imlib2 vulnerabilities (USN-55-1)

Recently, Pavel Kankovsky discovered several buffer overflows in imlib which were fixed in USN-53-1. It was found that imlib2 was vulnerable to similar issues. If an attacker tricked a user into loading a malicious XPM or BMP image, he could exploit this to execute arbitrary code in the context o...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-2)

USN-83-1 fixed some vulnerabilities in the 'lesstif2' library. The older 'lesstif1' library was also affected, however, a fix was not yet available at that time. This USN fixes the flaws for lesstif1. Please note that there are no supported applications that use this library, so this only affects...

[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...

DSA-913-1 gdk-pixbuf - several

Bulletin has no description...

DSA-911-1 gtk+2.0 - several

Bulletin has no description...

[SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 911-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 911-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2005 http://www.debian.org/security/faq -...

Fedora Core 4 : gtk2-2.6.10-2.fc4.4 (2005-1088)

The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...

SUSE-SA:2005:065: gtk2, gdk-pixbuf

The remote host is missing the patch for the advisory SUSE-SA:2005:065 gtk2, gdk-pixbuf. The image loading library of the gdk-pixbug/gtk2 package is vulnerable to several security-related bugs. This makes every application mostly GNOME applications which is linked against this library vulnerable...

Fedora Core 3 : gtk2-2.4.14-4.fc3.3 (2005-1087)

The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...

RHEL 2.1 / 3 / 4 : gdk-pixbuf (RHSA-2005:810)

Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...

RHEL 3 / 4 : gtk2 (RHSA-2005:811)

Updated gtk2 packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A...

GLSA-200511-14 : GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-14 GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities iDEFENSE reported a possible heap overflow in the XPM loader CVE-2005-3186. Upon further inspection, Ludwig Nussel discovered two additional issues in the XPM...

Fedora Core 4 : gdk-pixbuf-0.22.0-18.fc4.2 (2005-1085)

The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was found in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execut...

CVE-2005-3186

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow...