FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

sdl_image -- buffer overflow vulnerabilities

Affected packages
sdl_image < 1.2.6_1

Details

VuXML ID b1bcab7d-1880-11dd-a914-0016179b2dd5
Discovery 2008-01-24
Entry 2008-05-02

Secunia reports:

Two vulnerabilities have been reported in SDL_image, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library.

A boundary error within the LWZReadByte() function in IMG_gif.c can be exploited to trigger the overflow of a static buffer via a specially crafted GIF file.

A boundary error within the "IMG_LoadLBM_RW()" function in IMG_lbm.c can be exploited to cause a heap-based buffer overflow via a specially crafted IFF ILBM file.

References

CVE Name CVE-2007-6697
CVE Name CVE-2008-0544
URL http://secunia.com/advisories/28640