FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

gdk-pixbuf -- image decoding vulnerabilities

Affected packages
		linux-gdk-pixbuf	<	0.22.0.11.3.5
2.0	<=	gtk	<	2.4.9_1
		gdk-pixbuf	<	0.22.0_2

Details

VuXML ID	3d1e9267-073f-11d9-b45d-000c41e2cdad
Discovery	2004-09-15
Entry	2004-09-15
Modified	2004-11-09

Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder:

Heap-based overflow in pixbuf_create_from_xpm
Stack-based overflow in xpm_extract_color
Integer overflows in io-ico.c

Some of these flaws are believed to be exploitable.

References

CVE Name	CVE-2004-0782
CVE Name	CVE-2004-0783
CVE Name	CVE-2004-0788
URL	http://scary.beasts.org/security/CESA-2004-005.txt

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.