libXpm XPM image multiple integer overflows
| libxpm-xpm-overflow (17416) |  High Risk |
Description:
libXpm is vulnerable to multiple integer overflows in the xpmParseColors, XpmCreateImageFromXpmImage, CreateXImage, ParsePixels and ParseAndPutPixels functions. A remote attacker could exploit this vulnerability using a specially-crafted XPM image file to execute arbitrary code on the system.
Consequences:
Gain Access
Remedy:
Upgrade to the latest version of libXpm (6.8.1 or later), available from the X.org Web site. See References.
For SuSE Linux:
Upgrade to the latest gtk2, gdk-pixbuf package, as listed below. Refer to SuSE Security Announcement SUSE-SA:2004:033 for more information. See References.
SuSE Linux 9.1: 2.2.4-125.4 or later
SuSE Linux 9.0: 2.2.3-54 or later
SuSE Linux 8.2: 2.2.1-102 or later
SuSE Linux 8.1: 2.0.6-154 or later
For SuSE Linux:
Upgrade to the latest XFree86-libs, xshared package, as listed below. Refer to SuSE Security Announcement SUSE-SA:2004:034 for more information. See References.
SuSE Linux 9.1: 4.3.99.902-43.31 or later
SuSE Linux 9.0: 4.3.0.1-55 or later
SuSE Linux 8.2: 4.3.0-127 or later
SuSE Linux 8.1: 4.2.0-267 or later
For SUSE Linux:
Apply the appropriate fixed packages via the SUSE FTP server or the YaST Online Update, as listed in SUSE Security Summary Report SUSE-SR:2004:003. See References.
For Mandrake Linux:
Upgrade to the latest libxpm4 package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2004:098 : libxpm4. See References.
Mandrake Linux 9.2: 3.4k-27.1.92mdk or later
Mandrake Linux Corporate Server 2.1: 3.4k-21.1.C21mdk or later
Mandrake Linux 10.0: 3.4k-27.1.100mdk or later
Upgrade to the latest XFree86 package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2004:099 : XFree86. See References.
Mandrake Linux 9.2: 4.3-24.5.92mdk or later
Mandrake Linux Corporate Server 2.1: 4.2.1-6.10.C21mdk or later
Mandrake Linux 10.0: 4.3-32.2.100mdk or later
Upgrade to the latest imlib package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2005:007. See References.
Mandrake Linux 9.2: 1.9.14-8.2.92mdk or later
Mandrake Linux 9.2/AMD64: 1.9.14-8.2.92mdk or later
Mandrake Linux 10.0: 1.9.14-8.2.100mdk or later
Mandrake Linux 10.0/AMD64: 1.9.14-8.2.100mdk or later
Mandrake Linux 10.1: 1.9.14-10.1.101mdk or later
Mandrake Linux 10.1/X86_64: 1.9.14-10.1.101mdk or later
Mandrake Linux Corporate Server 2.1: 1.9.14-5.2.C21mdk or later
Mandrake Linux Corporate Server 2.1/X86_64: 1.9.14-5.2.C21mdk or later
For IBM AIX 5.2 and 5.3 on pSeries, AIX on i5/OS (iSeries), RSCT on Linux (pSeries, xSeries, zSeries), pSeries, and iSeries Hardware Management Console:
Apply the workarounds or fixes as listed in IBM Managed Security Services Outside Advisory Redistribution MSS-OAR-E01-2004:1484.2. See References.
For Red Hat Linux:
Upgrade to the latest XFree86 package, as listed below. Refer to RHSA-2004:478-13 for more information. See References.
Red Hat Enterprise Linux AS (v. 3), ES (v. 3), WS (v. 3), Desktop (v.3): 4.3.0-69 or later
For Red Hat Linux containing the imlib package:
Upgrade to the latest imlib package, as listed below. Refer to RHSA-2004:651-03 for more information. See References.
Red Hat Enterprise Linux AS, ES, WS (v. 3) and Desktop 3: 1.9.13-13.4 or later
Red Hat Enterprise Linux AS, ES, WS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1: 1.9.13-4
For Red Hat Linux (lesstif):
Refer to RHSA-2005:004-12 for patch, upgrade, or suggested workaround information. See References.
For Debian GNU/Linux 3.0 (woody):
Upgrade to the latest lesstif1-1 package, as listed below. Refer to DSA-560-1 for more information. See References.
Debian GNU/Linux 3.0 (woody): 0.93.18-5 or later
For Sun Solaris and JDS:
Apply the appropriate patch for your system, as listed in Sun Alert ID: 57653. See References.
For Mandrake Linux:
Upgrade to the latest xorg-x11 package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2004:124 for more information. See References.
Mandrake Linux 10.1: 6.7.0-4.1.101mdk or later
For Ubuntu Linux containing the libxpm4 package:
Upgrade to the latest version (4.3.0.dfsg.1-6ubuntu25.1 or later), as listed in USN-27-1 November 17, 2004. See References.
For Ubuntu Linux containing the imlib1 package:
Upgrade to the latest version (1.9.14-16ubuntu1.1 or later), as listed in USN-53-1 December 29, 2004. See References.
For Ubuntu Linux containing the imlib2 package:
Upgrade to the latest version (1.1.0-12ubuntu2.1 or later), as listed in USN-55-1 January 06, 2005. See References.
For Red Hat Linux containing the openmotif package:
Upgrade to the latest openmotif package, as listed below. Refer to RHSA-2004:537-17 for more information. See References.
Red Hat Enterprise Linux AS, ES, WS (v. 3) and Desktop 3: 2.2.3-4.RHEL3.4 or later
Red Hat Enterprise Linux AS, ES, WS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1: 2.1.30-13.21AS.4 or later
For Gentoo Linux:
Upgrade to the latest version of imlib (1.9.14-r3 or later), as listed in GLSA 200412-03. See References.
For Gentoo Linux:
Upgrade to the latest version of imlib2 (1.2.0 or later), as listed in GLSA 200501-19. See References.
For Gentoo Linux (openmotif):
Refer to Gentoo Linux Security Announcement GLSA 2005-02-07 for patch, upgrade, or suggested workaround information. See References.
For SGI Linux:
Upgrade to the latest imlib package, as listed in SGI Security Advisory 20041203-01-U. See References.
For Debian GNU/Linux 3.0 (woody):
Upgrade to the latest version of imlib (1.9.14-2woody2 or later), as listed in DSA-618-1. See References.
For Debian GNU/Linux 3.0 (woody):
Upgrade to the latest version of imlib2 (1.0.5-2woody2 or later), as listed in DSA-628-1. See References.
For Turbolinux:
Upgrade to the latest XFree86 package, as listed below. Refer to Turbolinux Security Advisory TLSA-2005-5 for more information. See References.
Turbolinux 10 Server: 4.3.0-77 or later
Turbolinux Home: 4.3.0-77 or later
Turbolinux 10 Desktop: 4.3.0-77 or later
Turbolinux 8 Server: 4.2.0-31 or later
Turbolinux 8 Workstation: 4.2.0-31 or later
Turbolinux 7 Server: 4.1.0-40 or later
Turbolinux 7 Workstation: 4.1.0-40 or later
For Turbolinux:
Upgrade to the latest imlib package, as listed below. Refer to Turbolinux Security Advisory TLSA-2005-6 for more information. See References.
Turbolinux 10 Server: 1.9.14-9 or later
Turbolinux Home: 1.9.14-9 or later
Turbolinux 10 Desktop: 1.9.14-9 or later
Turbolinux 8 Server: 1.9.13-10 or later
Turbolinux 8 Workstation: 1.9.13-10 or later
Turbolinux 7 Server: 1.9.10-7 or later
Turbolinux 7 Workstation: 1.9.10-7 or later
For HP-UX:
Refer to Hewlett-Packard Company Security Bulletin HPSBUX02119 SSRT4848 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- BugTraq Mailing List, Mon May 22 2006 - 08:38:14 CDT: [security bulletin] HPSBUX02119 SSRT4848 rev.1 - HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS).
- CIAC Information Bulletin 0-216: "gtk2" Package Vulnerability.
- CIAC Information Bulletin 0-217: "gdk-pixbuf" Package vulnerability.
- CIAC Information Bulletin 0-222: libXpm Library Contains Multiple Integer Overflow Vulnerabilities.
- CIAC Information Bulletin P-001: Red Hat Updated XFree86 Packages fix Security Issues.
- CIAC Information Bulletin P-052: Updated imlib Packages Fix Security Vulnerabilities.
- CIAC INFORMATION BULLETIN P-200: Apple Security Update 2005-005.
- Hewlett-Packard Company Security Bulletin HPSBUX02119 SSRT4848: HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS).
- Scary Beasts Security Advisory CESA-2004-003: libXpm multiple image parsing flaws.
- Sun Alert ID: 57653: libXpm Security Vulnerabilities Affect the Motif Library (libXm).
- X.org Web site: X.org.
- BID-11195: GDK-Pixbuf Multiple Vulnerabilities
- BID-11196: libXpm Image Decoding Multiple Remote Buffer Overflow Vulnerabilities
- BID-11830: IMLib Multiple XPM Image Decoding Buffer Overflow Vulnerabilities
- CVE-2004-0688: Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
- CVE-2004-0782: Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).
- CVE-2004-1026: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
- DSA-546: gdk-pixbuf -- several vulnerabilities
- DSA-549: gtk+ -- several vulnerabilities
- DSA-560: lesstif1-1 -- integer and stack overflows
- DSA-561: xfree86 -- integer and stack overflows
- DSA-618: imlib -- buffer overflows
- DSA-628: imlib2 -- integer overflows
- GLSA-200409-28: GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities
- GLSA-200409-34: X.org, XFree86: Integer and stack overflows in libXpm
- GLSA-200410-09: LessTif: Integer and stack overflows in libXpm
- GLSA-200412-03: imlib: Buffer overflows in image decoding
- GLSA-200501-19: imlib2: Buffer overflows in image decoding
- GLSA-200502-07: OpenMotif: Multiple vulnerabilities in libXpm
- MDKSA-2004:095: Updated gdk-pixbuf packages fix image loading vulnerabilities
- MDKSA-2004:095-1: Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities
- MDKSA-2004:098: Updated libxpm4 packages fix libXpm overflow vulnerabilities
- MDKSA-2004:099: Updated XFree86 packages fix libXpm overflow vulnerabilities
- MDKSA-2004:124: Updated xorg-x11 packages fix libXpm overflow vulnerabilities
- MDKSA-2005:007: Updated imlib packages fix vulnerability
- MDKSA-2005:214: Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability
- OSVDB ID: 10026: libXpm ParseAndPutPixels Function Integer Overflow
- OSVDB ID: 10030: libXpm xpmParseColors Function Integer Overflow
- OSVDB ID: 10031: libXpm XpmCreateImageFromXpmImage Function Integer Overflow
- OSVDB ID: 10032: libXpm CreateXImage Function Integer Overflow
- OSVDB ID: 10033: libXpm ParsePixels Function Integer Overflow
- RHSA-2004-447: gdk-pixbuf security update
- RHSA-2004-466: gtk2 security update
- RHSA-2004-478: XFree86 security update
- RHSA-2004-479: XFree86 security update
- RHSA-2004-537: openmotif security update
- RHSA-2004-651: imlib security update
- RHSA-2005-004: lesstif security update
- RHSA-2008-0524: Low: Red Hat Network Satellite Server security update
- SA20235: HP-UX Motif Applications libXpm Image Decoding Vulnerabilities
- SUSE-SA:2004:032: apache2: remote denial-of-service
- SUSE-SA:2004:033: gtk2 gdk-pixbuf: remote code execution
- SUSE-SA:2004:034: XFree86-libs xshared: remote command execution
- SUSE-SR:2004:003: SUSE Security Summary Report
Platforms Affected:
- Canonical Ubuntu 4.10
- Debian Debian Linux 3.0
- Gentoo Linux
- HP HP-UX B.11.00
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- MandrakeSoft Mandrake Linux 10.0
- MandrakeSoft Mandrake Linux 10.0 AMD64
- MandrakeSoft Mandrake Linux 10.1
- MandrakeSoft Mandrake Linux 10.1 X86_64
- MandrakeSoft Mandrake Linux 2006
- MandrakeSoft Mandrake Linux 2006 X86_64
- MandrakeSoft Mandrake Linux 9.2
- MandrakeSoft Mandrake Linux 9.2 AMD64
- MandrakeSoft Mandrake Linux LE2005 X86_64
- MandrakeSoft Mandrake Linux LE2005
- MandrakeSoft Mandrake Linux Corporate Server 2.1
- MandrakeSoft Mandrake Linux Corporate Server 2.1 X86_64
- MandrakeSoft Mandrake Linux Corporate Server 3.0 X86_64
- MandrakeSoft Mandrake Linux Corporate Server 3.0
- RedHat Enterprise Linux 2.1 AW
- RedHat Enterprise Linux 2.1 WS
- RedHat Enterprise Linux 2.1 ES
- RedHat Enterprise Linux 2.1 AS
- RedHat Enterprise Linux 3 Desktop
- RedHat Enterprise Linux 3 AS
- RedHat Enterprise Linux 3 ES
- RedHat Enterprise Linux 3 WS
- RedHat Linux Advanced Workstation 2.1 Itanium
- RedHat Network Satellite Server 4.2
- Sun JDS 2003
- Sun JDS Release 2
- Sun Solaris 7.0
- Sun Solaris 8
- Sun Solaris 9
- SuSE Linux Enterprise Server 8
- SuSE Linux Enterprise Server 9
- SUSE SuSE Linux 8.1
- SUSE SuSE Linux 8.2
- SUSE SuSE Linux 9.0
- SUSE SuSE Linux 9.1
- SuSE SuSE Linux Desktop 1.0
- SuSE SuSE SLES 9
- Turbolinux Turbolinux 10 Desktop
- Turbolinux Turbolinux 10 F...
- Turbolinux Turbolinux 10 Server
- Turbolinux Turbolinux 7 Server
- Turbolinux Turbolinux 7 Workstation
- Turbolinux Turbolinux 8 Server
- Turbolinux Turbolinux 8 Workstation
- Turbolinux Turbolinux Home
- XMLsoft Libxml2 prior to 2.6.6
Reported:
Sep 16, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net