Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

Marcus Meissner discovered that imlib's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. It is believed that this bug could be exploited for arbitrary code execution.

Marcus Meissner discovered a heap overflow error in imlib2, an imaging library for X and X11 and the successor of imlib, that may be utilised by an attacker to execute arbitrary code on the victims machine.

Marcus Meissner discovered a heap overflow error in imlib, an imaging library for X and X11, that could be abused by an attacker to execute arbitrary code on the victim's machine. The updated packages we have provided in DSA 548-1 did not seem to be sufficient, which should be fixed by this update.

Several buffer overflow vulnerabilities in ImageMagick were discovered by Marcus Meissner from SUSE. These vulnerabilities would allow an attacker to create a malicious image or video file in AVI, BMP, or DIB formats which could crash the reading process. It may be possible to create malicious images that could also allow for the execution of arbitrary code with the privileges of the invoking user or process.

The updated packages provided are patched to correct these problems.

An updated imlib package that fixes several heap overflows is now available.

Imlib is an image loading and rendering library.

Several heap overflow flaws were found in the imlib BMP image handler.
An attacker could create a carefully crafted BMP file in such a way that it could cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0817 to this issue.

Users of imlib should update to this updated package which contains backported patches and is not vulnerable to this issue.

Several heap overflow vulnerabilities have been found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0817 to this issue.

Users of imlib should update to this updated package which contains backported patches and is not vulnerable to these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Marcus Meissner discovered that the imlib and imlib2 libraries are also affected with a similar BMP-related vulnerability as the recent QT updates. The updated imlib and imlib2 packages are patched to protect against this problem.

The remote host is affected by the vulnerability described in GLSA-200409-12 (ImageMagick, imlib, imlib2: BMP decoding buffer overflows)

    Due to improper bounds checking, ImageMagick and imlib are vulnerable to a     buffer overflow when decoding runlength-encoded bitmaps. This bug can be     exploited using a specially crafted BMP image and could potentially allow     remote code execution when this image is decoded by the user.
  Impact :

    A specially crafted runlength-encoded BMP could lead ImageMagick and imlib     to crash or potentially execute arbitrary code.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
37111	FreeBSD : imlib -- BMP decoder heap buffer overflow (00644f03-fb58-11d8-9837-000c41e2cdad)	Nessus	FreeBSD Local Security Checks	high
15389	Debian DSA-552-1 : imlib2 - unsanitised input	Nessus	Debian Local Security Checks	high
15385	Debian DSA-548-2 : imlib - unsanitised input	Nessus	Debian Local Security Checks	high
14796	Mandrake Linux Security Advisory : ImageMagick (MDKSA-2004:102)	Nessus	Mandriva Local Security Checks	high
14735	RHEL 2.1 / 3 : imlib (RHSA-2004:465)	Nessus	Red Hat Local Security Checks	high
14704	Fedora Core 2 : imlib-1.9.13-19 (2004-301)	Nessus	Fedora Local Security Checks	high
14703	Fedora Core 1 : imlib-1.9.13-15.fc1 (2004-300)	Nessus	Fedora Local Security Checks	high
14678	Mandrake Linux Security Advisory : imlib2 (MDKSA-2004:089)	Nessus	Mandriva Local Security Checks	high
14677	GLSA-200409-12 : ImageMagick, imlib, imlib2: BMP decoding buffer overflows	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2004-0817

critical

Tenable Plugins

high

high

high

high

high

high

high

high

high