CVE-2005-0639 Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer o...
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xli | = 1.14 | No fix listed |
| xli | = 1.15 | No fix listed |
| xli | = 1.16 | No fix listed |
| xli | = 1.17 | No fix listed |
| altlinux alt linux | = 2.3 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 2.0 | No fix listed |
| suse linux | = 3.0 | No fix listed |
| suse linux | = 4.0 | No fix listed |
| suse linux | = 4.2 | No fix listed |
| suse linux | = 4.3 | No fix listed |
| suse linux | = 4.4 | No fix listed |
| suse linux | = 4.4.1 | No fix listed |
| suse linux | = 5.0 | No fix listed |
| suse linux | = 5.1 | No fix listed |
| suse linux | = 5.2 | No fix listed |
| suse linux | = 5.3 | No fix listed |
| suse linux | = 6.0 | No fix listed |
| suse linux | = 6.1 | No fix listed |
| suse linux | = 6.1-alpha | No fix listed |
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.3-alpha | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| suse linux | = 9.3 | No fix listed |
| debian/xli(Debian:12) | < 1.17.0-17 | 1.17.0-17 |
| debian/xli(Debian:13) | < 1.17.0-17 | 1.17.0-17 |
| debian/xli(Debian:14) | < 1.17.0-17 | 1.17.0-17 |
| debian/xloadimage(Debian:12) | < 4.1-14.2 | 4.1-14.2 |
| debian/xloadimage(Debian:13) | < 4.1-14.2 | 4.1-14.2 |
| debian/xloadimage(Debian:14) | < 4.1-14.2 | 4.1-14.2 |
References
- bugs.gentoo.org vendor-advisory
- 14459 patch third-party-advisory vendor-advisory
- GLSA-200503-05 vendor-advisory
- DSA-695 vendor-advisory
- Debian Security Tracker CVE-2005-0639 vendor-advisory