OSVDB ID: 10029

Title: libXpm xpmParseColors Function XPMv2/3 Parsing Stack Overflow

Info

Disclosure
Sep 15, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A local overflow exists in libXpm. The xpmParseColors function fails to validate user-supplied XPMv2/3 image files resulting in a stack overflow. With a specially crafted request, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade to version 6.8.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

X.Org Foundation

libXpm

 6.1
6.3
6.4
6.5.1
6.6
6.7
6.8.0

References

Credit
  • Chris Evans - chrisBrand New Doo Dooscary.beasts.org -


Direct URL: http://osvdb.org/36218