IMLib/IMLib2多个BMP图像编码缓冲区溢出漏洞

admin
admin
admin
0
文章
0
评论
2022-07-22 12:57:37 CNNVD漏洞 来源：ZONE.CI 全球网 0 阅读模式

漏洞信息详情

IMLib/IMLib2多个BMP图像编码缓冲区溢出漏洞

  • CNNVD编号：CNNVD-200409-037
  • 危害等级： 高危
  • CVE编号： CVE-2004-0827
  • 漏洞类型： 缓冲区溢出
  • 发布时间： 2004-09-16
  • 威胁类型： 远程
  • 更新时间： 2010-01-28
  • 厂        商： sun
  • 漏洞来源： Discovery of these...

漏洞简介

ImageMagick graphics库5.4.4前的5.x版本和6.0.6.2前的6.x版本存在漏洞。远程攻击者可以借助畸形（1）AVI，（2）BMP或者（3）DIB文件导致服务拒绝（应用程序崩溃）或可能执行任意代码。

漏洞公告

The vendor has addressed this issue in Imlib2 1.1.2. Reportedly, this fix is available through CVS: http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/ Please see the referenced advisories for more information. Sun Solaris 10

  • Sun 136882-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -136882-01-1
RedHat Fedora Core2
  • Fedora ImageMagick-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2 http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-6.2 .0.7-2.fc2.4.legacy.i386.rpm
  • Fedora ImageMagick-c++-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2 http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++ -6.2.0.7-2.fc2.4.legacy.i386.rpm
  • Fedora ImageMagick-c++-devel-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2 http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++ -devel-6.2.0.7-2.fc2.4.legacy.i386.rpm
  • Fedora ImageMagick-devel-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2 http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-dev el-6.2.0.7-2.fc2.4.legacy.i386.rpm
  • Fedora ImageMagick-perl-6.2.0.7-2.fc2.4.legacy.i386.rpmRedHat Fedora Core 2 http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-per l-6.2.0.7-2.fc2.4.legacy.i386.rpm
RedHat Fedora Core1
  • Fedora ImageMagick-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1 http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-5.5 .6-13.legacy.i386.rpm
  • Fedora ImageMagick-c++-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1 http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++ -5.5.6-13.legacy.i386.rpm
  • Fedora ImageMagick-c++-devel-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1 http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++ -devel-5.5.6-13.legacy.i386.rpm
  • Fedora ImageMagick-devel-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1 http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-dev el-5.5.6-13.legacy.i386.rpm
  • Fedora ImageMagick-perl-5.5.6-13.legacy.i386.rpmRedHat Fedora Core 1 http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-per l-5.5.6-13.legacy.i386.rpm
Sun Solaris 10_x86
  • Sun 136883-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -136883-01-1
Sun Solaris 9
  • Sun 114636-04 (sun) http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114636-04-1
  • Sun 137038-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -137038-01-1
Sun Solaris 9_x86
  • Sun 114637-04 (sun) http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114637-04-1
  • Sun 137039-01 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -137039-01-1
Enlightenment Imlib2 1.0.5
  • Conectiva imlib2-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-1.0.6-26409U90_1cl.i 386.rpm
  • Conectiva imlib2-1.0.6-58651U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-1.0.6-58651U10_1cl. i386.rpm
  • Conectiva imlib2-devel-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-devel-1.0.6-26409U90 _1cl.i386.rpm
  • Conectiva imlib2-devel-1.0.6-58651U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-devel-1.0.6-58651U1 0_1cl.i386.rpm
  • Conectiva imlib2-devel-static-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-devel-static-1.0.6-2 6409U90_1cl.i386.rpm
  • Conectiva imlib2-devel-static-1.0.6-58651U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-devel-static-1.0.6- 58651U10_1cl.i386.rpm
  • Conectiva imlib2-filters-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-filters-1.0.6-26409U 90_1cl.i386.rpm
  • Conectiva imlib2-filters-1.0.6-58651U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-filters-1.0.6-58651 U10_1cl.i386.rpm
  • Conectiva imlib2-loader_argb-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-loader_argb-1.0.6-26 409U90_1cl.i386.rpm
  • Conectiva imlib2-loader_argb-1.0.6-58651U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/imlib2-loader_argb-1.0.6-5 8651U10_1cl.i386.rpm
  • Conectiva imlib2-loader_bmp-1.0.6-26409U90_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/imlib2-loader_bmp-1.0.6-264 09U90_1cl.i386.rpm

参考网址

来源: REDHAT 名称: RHSA-2004:494 链接:http://www.redhat.com/support/errata/RHSA-2004-494.HTML 来源: REDHAT 名称: RHSA-2004:480 链接:http://www.redhat.com/support/errata/RHSA-2004-480.HTML 来源: DEBIAN 名称: DSA-547 链接:http://www.debian.org/security/2004/dsa-547 来源: XF 名称: imagemagick-bmp-Bo(17173) 链接:http://xforce.iss.net/xforce/xfdb/17173 来源: SUNALERT 名称: 201006 链接:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1 来源: OVAL 名称: oval:org.mitre.oval:def:11123 链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11123 来源: VUPEN 名称: ADV-2008-0412 链接:http://www.frsirt.com/english/advisories/2008/0412 来源: SUNALERT 名称: 231321 链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1 来源: SECUNIA 名称: 28800 链接:http://secunia.com/advisories/28800

受影响实体

  • Sun Java_desktop_system:2.0  

补丁

    暂无

weinxin
特别声明
本站(ZONE.CI)所有文章仅供技术研究，若将其信息做其他用途，由用户承担全部法律及连带责任，本站不承担任何法律及连带责任，请遵守中华人民共和国安全法.
ZONE.CI 全球网 | 安全领域涉猎者-乌云独行地带
咨询加Q：999999999
ZONE.CI 全球网 | 安全领域涉猎者-乌云独行地带
ZONE.CI 全球网 安全领域涉猎者-乌云独行地带
KDE Konqueror漏洞 CNNVD漏洞

KDE Konqueror漏洞

漏洞信息详情KDE Konqueror漏洞CNNVD编号：CNNVD-200409-038危害等级： 低危CVE编号：CVE-2004-0870漏洞类型：未知发布时间：2004
07-220 评论
获取本源码
售前咨询加Q：120433200
站媒体网仿《知更鸟》模板
获取本源码 zmt6.com
评论：0   参与：  0