IMLib/IMLib2多个BMP图像解码缓冲区溢出漏洞

漏洞信息详情

IMLib/IMLib2多个BMP图像解码缓冲区溢出漏洞

• CNNVD编号：CNNVD-200412-223
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0802
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2004-12-31
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2010-01-28
  
• 厂        商：
  
  ubuntu
• 漏洞来源：
  Discovery of these…

imlib2 1.1.2之前版本的BMP载入程序存在缓冲区溢出漏洞。远程攻击者可以借助一个特制的BMP图像来执行任意代码。该漏洞不同于CVE-2004-0817。

The vendor has addressed this issue in Imlib2 1.1.2. Reportedly, this fix is available through CVS:
http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/
Please see the referenced advisories for more information.
Sun Solaris 10

• Sun 136882-01
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -136882-01-1

RedHat Fedora Core2

• Fedora ImageMagick-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2
  
  http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-6.2
  .0.7-2.fc2.4.legacy.i386.rpm
• Fedora ImageMagick-c++-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2
  
  http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++
  -6.2.0.7-2.fc2.4.legacy.i386.rpm
• Fedora ImageMagick-c++-devel-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2
  
  http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++
  -devel-6.2.0.7-2.fc2.4.legacy.i386.rpm
• Fedora ImageMagick-devel-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2
  
  http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-dev
  el-6.2.0.7-2.fc2.4.legacy.i386.rpm
• Fedora ImageMagick-perl-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2
  
  http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-per
  l-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core1

• Fedora ImageMagick-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-5.5
  .6-13.legacy.i386.rpm
• Fedora ImageMagick-c++-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++
  -5.5.6-13.legacy.i386.rpm
• Fedora ImageMagick-c++-devel-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++
  -devel-5.5.6-13.legacy.i386.rpm
• Fedora ImageMagick-devel-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-dev
  el-5.5.6-13.legacy.i386.rpm
• Fedora ImageMagick-perl-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-per
  l-5.5.6-13.legacy.i386.rpm

Sun Solaris 10_x86

• Sun 136883-01
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -136883-01-1

Sun Solaris 9

• Sun 114636-04 (sun)
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -114636-04-1
• Sun 137038-01
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -137038-01-1

Sun Solaris 9_x86

• Sun 114637-04 (sun)
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -114637-04-1
• Sun 137039-01
  
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21
  -137039-01-1

Enlightenment Imlib2 1.0.5

• Conectiva imlib2-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-1.0.6-26409U90_1cl.i
  386.rpm
• Conectiva imlib2-1.0.6-58651U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-1.0.6-58651U10_1cl.
  i386.rpm
• Conectiva imlib2-devel-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-devel-1.0.6-26409U90
  _1cl.i386.rpm
• Conectiva imlib2-devel-1.0.6-58651U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-devel-1.0.6-58651U1
  0_1cl.i386.rpm
• Conectiva imlib2-devel-static-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-devel-static-1.0.6-2
  6409U90_1cl.i386.rpm
• Conectiva imlib2-devel-static-1.0.6-58651U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-devel-static-1.0.6-
  58651U10_1cl.i386.rpm
• Conectiva imlib2-filters-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-filters-1.0.6-26409U
  90_1cl.i386.rpm
• Conectiva imlib2-filters-1.0.6-58651U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-filters-1.0.6-58651
  U10_1cl.i386.rpm
• Conectiva imlib2-loader_argb-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-loader_argb-1.0.6-26
  409U90_1cl.i386.rpm
• Conectiva imlib2-loader_argb-1.0.6-58651U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-loader_argb-1.0.6-5
  8651U10_1cl.i386.rpm
• Conectiva imlib2-loader_bmp-1.0.6-26409U90_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-loader_bmp-1.0.6-264
  09U90_1cl.i386.rpm

来源: XF
名称: imlib2-bmp-bo(17183)
链接:http://xforce.iss.net/xforce/xfdb/17183

来源: BID
名称: 11084
链接:http://www.securityfocus.com/bid/11084

来源: GENTOO
名称: GLSA-200409-12
链接:http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml

来源: CONECTIVA
名称: CLA-2004:870
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870

来源: www.vuxml.org
链接:http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html

来源: SUNALERT
名称: 201611
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1

来源: cvs.sourceforge.net
链接:http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup