600 matches found
security flaw
io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...
Important: Red Hat Security Advisory: gdk-pixbuf security update
Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...
Fedora Core 3 : lesstif-0.93.36-6.FC3.2 (2005-815)
Fri May 6 2005 Thomas Woerner 0.93-36-6.FC3.2 - fixed possible libXpm overflows 151640 - allow to write XPM files with absolute path names again 140815 - Fri Nov 26 2004 Thomas Woerner 0.93.36-6.FC3.1 - fixed CVE-2004-0687 integer overflows and CVE-2004-0688 stack overflows in embedded Xpm...
Fedora Core 3 : openmotif-2.2.3-9.FC3.1 (2005-808)
Mon Apr 4 2005 Thomas Woerner 2.2.3-9.FC3.1 - fixed possible libXpm overflows 151642 - Upstream Fix: Multiscreen mode - Upstream Fix: Crash when restarting by a session manager motifzone1193 - Upstream Fix: Crash when duplicating a window menu containing f.circleup motifzone1202 - fixed divide by...
FreeBSD : imlib -- xpm heap buffer overflows and integer overflows (2001103a-6bbd-11d9-851d-000a95bc6fae)
Pavel Kankovsky reports : Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...
FreeBSD : xpm -- image decoding vulnerabilities (ef253f8b-0727-11d9-b45d-000c41e2cdad)
Chris Evans discovered several vulnerabilities in the libXpm image decoder : - A stack-based buffer overflow in xpmParseColors - An integer overflow in xpmParseColors - A stack-based buffer overflow in ParsePixels and ParseAndPutPixels The X11R6.8.1 release announcement reads : This version is...
FreeBSD : gdk-pixbuf -- image decoding vulnerabilities (3d1e9267-073f-11d9-b45d-000c41e2cdad)
Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder : - Heap-based overflow in pixbufcreatefromxpm - Stack-based overflow in xpmextractcolor - Integer overflows in io-ico.c Some of these flaws are believed to be exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
AIX 5.1 : IY64926
The remote host is missing AIX Critical Security Patch number IY64926 SECURITY VULNERABILITIES IN XPM CODE. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 5.1 : IY61953
The remote host is missing AIX Critical Security Patch number IY61953 SECURITY VULNERABILITIES IN XPM CODE. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 5.3 : IY61956
The remote host is missing AIX Critical Security Patch number IY61956 SECURITY VULNERABILITIES IN XPM CODE. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 5.2 : IY61954
The remote host is missing AIX Critical Security Patch number IY61954 SECURITY VULNERABILITIES IN XPM CODE. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
fonts, xorg security update
CentOS Errata and Security Advisory CESA-2005:198 Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X...
RHEL 2.1 : lesstif (RHSA-2005:473)
Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which implement the Motif industry standard graphical user...
Fedora Core 2 : xorg-x11-6.7.0-14 (2005-272)
An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and...
openmotif, openmotif21 security update
CentOS Errata and Security Advisory CESA-2005:412 Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif...
Moderate: Red Hat Security Advisory: openmotif security update
Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...
Mandrake Linux Security Advisory : XFree86 (MDKSA-2005:081)
The XPM library which is part of the XFree86/XOrg project is used by several GUI applications to process XPM image files. The XPM library which is part of the XFree86/XOrg project is used by several GUI applications to process XPM image files. An integer overflow flaw was found in libXPM, which i...
[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...
