Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora Core 2: Xorg-x11 Integer Overflow Critical Threat Advisory

fedora
Calendar Grey November 17, 2004
Scroller Fedora
Buffer overflow vulnerabilities in X.Org's libXpm library addressed in recent Fedora patch, mitigating potential execution errors and system instability.
Several integer overflow flaws in the X.Org libXpm library used to decode XPM (X PixMap) images have been found and addressed

Summary

X.org X11 is an open source implementation of the X Window System. It

provides the basic low level functionality which full fledged

graphical user interfaces (GUIs) such as GNOME and KDE are designed

upon.

Update Information:

Several integer overflow flaws in the X.Org libXpm library used to decode XPM (X PixMap) images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0914 to this issue.

Users are advised to upgrade to these erratum packages, which contain backported security patches as well as other bug fixes. * Mon Nov 15 2004 Kristian Høgsberg <krh@redhat.com> 6.7.0-10

- Added xorg-x11-6.7.0-xpm-security-fixes-CAN-2004-0914.patch to fix a number of Xpm issues found by Thomas Biege <thomas@suse.de> (#136169)

This update can be downloaded from:


124c9981637617da46d15f7b195e9ff2 SRPMS/xorg-x11-6.7.0-10.src.rpm fbac70a586ce7c30b6cd9b8eb7c81ddc x86_64/xorg-x11-6.7.0-10.x86_64.rpm ef9f482aead8998f6b7a865f15a7ea26 x86_64/xorg-x11-devel-6.7.0-10.x86_64.rpm ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Fedora arbitrary code execution software fix integer overflow libXpm Xorg

Change Log

References

Fedora Update Notification FEDORA-2004-433 2004-11-17
Product : Fedora Core 2 Name : xorg-x11 Version : 6.7.0 Release : 10 Summary : The basic fonts, programs and docs for an X workstation. Description : X.org X11 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon.

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora Core 2
Name: xorg-x11
Version: 6.7.0
Release: 10
Summary: The basic fonts, programs and docs for an X workstation.

Topics%20covered

Topics Covered

security advisory Fedora arbitrary code execution software fix integer overflow libXpm Xorg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.