1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsa id="200409-34">
<title>X.org, XFree86: Integer and stack overflows in libXpm</title>
<synopsis>
libXpm, the X Pixmap library that is a part of the X Window System,
contains multiple stack and integer overflows that may allow a
carefully-crafted XPM file to crash applications linked against libXpm,
potentially allowing the execution of arbitrary code.
</synopsis>
<product type="ebuild">X</product>
<announced>2004-09-27</announced>
<revised count="02">2006-05-27</revised>
<bug>64152</bug>
<access>remote</access>
<affected>
<package name="x11-base/xorg-x11" auto="yes" arch="*">
<unaffected range="rge">6.7.0-r2</unaffected>
<unaffected range="ge">6.8.0-r1</unaffected>
<vulnerable range="lt">6.7.0-r2</vulnerable>
<vulnerable range="eq">6.8.0</vulnerable>
</package>
<package name="x11-base/xfree" auto="yes" arch="alpha x86">
<unaffected range="ge">4.3.0-r7</unaffected>
<vulnerable range="lt">4.3.0-r7</vulnerable>
</package>
<package name="x11-base/xfree" auto="yes" arch="amd64 hppa ia64 mips ppc sparc">
<vulnerable range="lt">4.3.0-r7</vulnerable>
</package>
</affected>
<background>
<p>
XFree86 and X.org are both implementations of the X Window System.
</p>
</background>
<description>
<p>
Chris Evans has discovered multiple integer and stack overflow
vulnerabilities in the X Pixmap library, libXpm, which is a part of the
X Window System. These overflows can be exploited by the execution of a
malicious XPM file, which can crash applications that are dependent on
libXpm.
</p>
</description>
<impact type="normal">
<p>
A carefully-crafted XPM file could crash applications that are linked
against libXpm, potentially allowing the execution of arbitrary code
with the privileges of the user running the application.
</p>
</impact>
<workaround>
<p>
There is no known workaround at this time.
</p>
</workaround>
<resolution>
<p>
All X.org users should upgrade to the latest version:
</p>
<code>
# emerge sync
# emerge -pv ">=x11-base/xorg-x11-6.7.0-r2"
# emerge ">=x11-base/xorg-x11-6.7.0-r2"</code>
<p>
All XFree86 users should upgrade to the latest version:
</p>
<code>
# emerge sync
# emerge -pv ">=x11-base/xfree-4.3.0-r7"
# emerge ">=x11-base/xfree-4.3.0-r7"</code>
<p>
Note: Usage of XFree86 is deprecated on the AMD64, HPPA, IA64, MIPS,
PPC and SPARC architectures: XFree86 users on those architectures
should switch to X.org rather than upgrading XFree86.
</p>
</resolution>
<references>
<uri link="https://freedesktop.org/pipermail/xorg/2004-September/003196.html">X.org Security Advisory</uri>
<uri link="https://freedesktop.org/pipermail/xorg/2004-September/003172.html">X11R6.8.1 Release Notes</uri>
<uri link="https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0687">CAN-2004-0687</uri>
<uri link="https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0688">CAN-2004-0688</uri>
</references>
<metadata tag="requester" timestamp="2004-09-18T17:10:48Z">
koon
</metadata>
<metadata tag="submitter" timestamp="2004-09-20T05:29:54Z">
lewk
</metadata>
<metadata tag="bugReady" timestamp="2004-09-26T20:54:15Z">
koon
</metadata>
</glsa>
|
GitWeb