Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200501-10 Critical: vim Arbitrary Code Execution

gentoo
Calendar Grey January 6, 2005
Scroller Gentoo
Gentoo security advisory GLSA 202301-15 addresses vulnerabilities in gimp that could result in unauthorized data manipulation. Prompt remediation is advised.
xzgv contains multiple overflows that may lead to the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200501-09 https://security.gentoo.org/ Severity: Normal Title: xzgv: Multiple overflows Date: January 06, 2005 Bugs: #74069 ID: 200501-09

Synopsis ======= xzgv contains multiple overflows that may lead to the execution of arbitrary code.
Background ========= xzgv is a picture viewer for X, with a thumbnail-based file selector.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/xzgv <= 0.8 >= 0.8-r1
========== Multiple overflows have been found in the image processing code of xzgv, including an integer overflow in the PRF parsing code (CAN-2004-0994).
Impact ===== An attacker could entice a user to open or browse a specially-crafted image file, ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution normal severity xzgv issue

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
medium
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution normal severity xzgv issue

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround