imlib BMP image buffer overflow
| imlib-bmp-bo (17182) |  High Risk |
Description:
imlib is vulnerable to a buffer overflow. By creating a specially-crafted BMP image file, a remote attacker could overflow a buffer and cause the program to crash or possibly execute arbitrary code on the system, once the victim decodes the malicious file.
Platforms Affected:
- Carsten Haitzler, imlib 1.9.14
- Conectiva, Linux 10
- Conectiva, Linux 9.0
- Debian, Debian Linux 3.0
- Gentoo, Linux
- MandrakeSoft, Mandrake Linux 10.0 AMD64
- MandrakeSoft, Mandrake Linux 10.0
- MandrakeSoft, Mandrake Linux 9.2
- MandrakeSoft, Mandrake Linux 9.2 AMD64
- MandrakeSoft, Mandrake Linux Corporate Server 2.1
- MandrakeSoft, Mandrake Linux Corporate Server 2.1 X86_64
- RedHat, Enterprise Linux 2.1 AW
- RedHat, Enterprise Linux 2.1 WS
- RedHat, Enterprise Linux 2.1 AS
- RedHat, Enterprise Linux 2.1 ES
- RedHat, Enterprise Linux 3 WS
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 Desktop
- RedHat, Linux Advanced Workstation 2.1 Itanium
- Sun, JDS 2003
- Sun, JDS Release 2
- Turbolinux, Turbolinux 10 Desktop
- Turbolinux, Turbolinux 10 F...
- Turbolinux, Turbolinux 7 Server
- Turbolinux, Turbolinux 7 Workstation
- Turbolinux, Turbolinux 8 Server
- Turbolinux, Turbolinux 8 Workstation
Remedy:
Apply the patch for this vulnerability, available from the Bugzilla Web site. See References.
For Mandrake Linux:
Upgrade to the latest imlib package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2004:089 : imlib2 for more information. See References.
Mandrake Linux 9.2: 1.9.14-8.1.92mdk or later
Mandrake Linux Corporate Server 2.1: 1.9.14-5.1.C21mdk or later
Mandrake Linux 10.0: 1.9.14-8.1.100mdk or later
For Gentoo Linux:
Upgrade to the latest version of imlib, as listed in GLSA 200409-12. See References.
For Red Hat Linux:
Upgrade to the latest imlib package, as listed below. Refer to RHSA-2004:465-08 for more information. See References.
Red Hat Enterprise Linux AS (v. 2.1), ES (v. 2.1), WS (v. 2.1), and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor: 1.9.13-4.2 or later
Red Hat Enterprise Linux AS (v. 3), ES (v. 3), WS (v. 3), Desktop: 1.9.13-13.3.x86_64 or later
For Debian GNU/Linux 3.0 (alias woody):
Upgrade to the latest imlib package (1.9.14-2wody1 or later), as listed in DSA-548-1. See References.
For Turbolinux:
Upgrade to the latest imlib package, as listed below. Refer to Turbolinux Security Advisory TLSA-2004-27 for more information. See References.
Turbolinux 10 Desktop: 1.9.14-7 or later
Turbolinux 8 Server and 8 Workstation:1.9.13-9 or later
Turbolinux 7 Server and 7 Workstation: 1.9.10-6 or later
For Sun Java Desktop System:
Apply the appropriate patch for your system, as listed below. Refer to Sun Alert ID: 57645 for more information. See References.
For Conectiva Linux:
Upgrade to the latest imlib package, as listed below. Refer to Conectiva Linux Security Announcement CLSA-2004:870 for more information. See References.
Conectiva Linux 10.0: 1.9.14-63739U10_1cl or later
Conectiva Linux 9: 1.9.14-29233U90_1cl or later
For other distributions:
Contact your vendor for upgrade or patch information.
Consequences:
Gain Access
References:
- Bugzilla Web site, imlib patch at http://bugzilla.gnome.org/attachment.cgi?id=30934&action=view.
- CIAC Information Bulletin 0-215, "imlib" Package Vulnerability at http://www.ciac.org/ciac/bulletins/o-215.shtml.
- Conectiva Linux Security Announcement CLSA-2004:870, Fix for a buffer overflow in imlib and imlib2 at http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000870.
- Sun Alert ID: 57645, Security Vulnerabilities in imlib Library May Allow a Remote Unprivileged User to Execute Arbitrary Code at http://sunsolve.sun.com/search/document.do?assetkey=1-26-57645-1&searchclause.
- BID-11084: IMLib/IMLib2 Multiple BMP Image Decoding Buffer Overflow Vulnerabilities
- CVE-2004-0817: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
- DSA-548: imlib -- unsanitised input
- GLSA-200409-12: ImageMagick, imlib, imlib2: BMP decoding buffer overflows
- MDKSA-2004:089: Updated imlib/imlib2 packages fix BMP crash vulnerability
- RHSA-2004-465: imlib security update
Reported:
Aug 31, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net