OSVDB ID: 10033

Title: libXpm ParsePixels Function Integer Overflow

Info

Disclosure
Sep 15, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A local overflow exists in libXpm. The ParsePixels function fails to validate user-supplied input resulting in an integer overflow. With a specially crafted request, a malicious user can cause a denial of service resulting in a loss of availability.

Classification

 Location: Local Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade to version 6.8.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

X.Org Foundation

libXpm

 6.1
6.3
6.4
6.5.1
6.6
6.7
6.8.0

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/36218