“Secunia Advisory: SA14460

Release Date: 2005-03-07

Critical: Highly critical

Impact: System access

Where: From remote

Solution Status: Vendor Patch

Software: X Window System 11 (X11) 6.x

Chris Gilbert has reported a vulnerability in libXpm, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to boundary errors in “GetImagePixels()” and “PutImagePixels()”. This may be exploited to cause a buffer overflow when a specially crafted XPM image file is processed.

Successful exploitation may potentially allow execution of arbitrary code.

Solution: The vulnerability has been fixed in the CVS repository.”

Full article: Secunia Advisory: SA14460