Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Gentoo: GLSA-200604-14 Normal: Dia Code Execution Via XFig Import

gentoo
Calendar Grey April 23, 2006
Dist Gentoo Esm H88
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Adviso
Buffer overflows in Dia's XFig import could allow remote attackers to execute arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200604-14 https://security.gentoo.org/ Severity: Normal Title: Dia: Arbitrary code execution through XFig import Date: April 23, 2006 Bugs: #128107 ID: 200604-14

Synopsis ======= Buffer overflows in Dia's XFig import could allow remote attackers to execute arbitrary code.
Background ========= Dia is a GTK+ based diagram creation program.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-office/dia < 0.94-r5 >= 0.94-r5
========== infamous41md discovered multiple buffer overflows in Dia's XFig file import plugin.
Impact ===== By enticing a user to import a specially crafted XFig file into Dia, an attacker could exploit ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo buffer overflow arbitrary code execution normal severity XFig import Dia

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo buffer overflow arbitrary code execution normal severity XFig import Dia

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here