OSVDB ID: 10034

Title: libXpm ParseAndPutPixels Function Stack Overflow

Info

Disclosure
Sep 15, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A local overflow exists in libXpm. The ParseAndPutPixels function fails to validate user-supplied input resulting in a stack overflow. With a specially crafted request, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade to version 6.8.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

X.Org Foundation

libXpm

 6.1
6.3
6.4
6.5.1
6.6
6.7
6.8.0

References

Credit
  • Chris Evans - chrisBrand New Doo Dooscary.beasts.org -


Direct URL: http://osvdb.org/36218