high7.5
CVE-2005-0605
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Impact
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lesstif | Lesstif | Version 0.93.94 |
| Sgi | Propack | Version 3.0 |
| X.Org | X11r6 | Versions 6.7.0, 6.8, 6.8.1 |
| Xfree86 Project | X11r6 | Versions 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6 |
| Altlinux | Alt Linux | Version 2.3 |
| Mandrakesoft | Mandrake Linux | Versions 10.0, 10.1, 10.2 |
| Mandrakesoft | Mandrake Linux Corporate Server | Versions 2.1, 3.0 |
| Redhat | Enterprise Linux | Versions 3.0, 4.0 |
| Redhat | Enterprise Linux Desktop | Versions 3.0, 4.0 |
| Redhat | Fedora Core | Versions core_2.0, core_3.0 |
| Suse | Suse Linux | Versions 6.1, 6.2, 6.3, 6.4, 7.0, 7.1 |
References
- NVD record
- CVE.org record
- http://bugs.gentoo.org/show_bug.cgi?id=83598
- http://bugs.gentoo.org/show_bug.cgi?id=83655
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://secunia.com/advisories/14460
- http://secunia.com/advisories/18049
- http://secunia.com/advisories/18316
- http://secunia.com/advisories/19624
- http://security.gentoo.org/glsa/glsa-200503-08.xml
- http://securitytracker.com/id?1013339
- http://www.debian.org/security/2005/dsa-723
- http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html
- http://www.redhat.com/support/errata/RHSA-2005-044.html
- http://www.redhat.com/support/errata/RHSA-2005-198.html
- http://www.redhat.com/support/errata/RHSA-2005-331.html
- http://www.redhat.com/support/errata/RHSA-2005-412.html
- http://www.redhat.com/support/errata/RHSA-2005-473.html
- http://www.redhat.com/support/errata/RHSA-2008-0261.html
- http://www.securityfocus.com/bid/12714
- https://bugs.freedesktop.org/attachment.cgi?id=1909
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411
- https://usn.ubuntu.com/92-1/
- https://usn.ubuntu.com/97-1/
- http://bugs.gentoo.org/show_bug.cgi?id=83598