GTKSee PNG Image Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Intelligence

GTKSee PNG Image Buffer Overflow Vulnerability
Secunia Advisory:	SA9136	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2003-06-30
Popularity:	7,834 views

Critical:	Moderately critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.0 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2003-0444

Description: Debian has reported a vulnerability in GTKSee, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when handling PNG images of certain colour depths. If a user is tricked into viewing a malicious PNG image in GTKSee, it may be possible to cause a heap overflow and execute arbitrary code with the user's privileges on the system. Solution: Debian has issued updated packages: -- Debian GNU/Linux 3.0 alias woody -- Source archives: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6.dsc Size/MD5 checksum: 609 816a95eaab25f8602b45f07cc9535da3 http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6.diff.gz Size/MD5 checksum: 3631 50123e3acce09d5bba798deef836acf5 http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0.orig.tar.gz Size/MD5 checksum: 224809 21a8a9f28fa61d73725fb606962fa108 Alpha architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_alpha.deb Size/MD5 checksum: 137056 29f5d8f312f6ac17d937b0924f671b70 ARM architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_arm.deb Size/MD5 checksum: 118008 5c1071f06eb3b55449345e1ef7434e88 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_i386.deb Size/MD5 checksum: 118084 fd16b3894d3462fceb02cb90aa74783b Intel IA-64 architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_ia64.deb Size/MD5 checksum: 196372 60d7d6156c3f48ac1bb85f6f44d259fb HP Precision architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_hppa.deb Size/MD5 checksum: 122912 2943288b598af7d17db20eb61e173fec Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_m68k.deb Size/MD5 checksum: 115652 a934c616f63385b803bd96366e319eed Big endian MIPS architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_mips.deb Size/MD5 checksum: 118154 bb34474023526ed5dd47d13c005fce93 Little endian MIPS architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_mipsel.deb Size/MD5 checksum: 114920 6671eed391cb58cb63336465dc95e3af PowerPC architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_powerpc.deb Size/MD5 checksum: 115882 3b71d0550032209bb3b6685eed3210a6 IBM S/390 architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_s390.deb Size/MD5 checksum: 116520 d38703d62fe603f477adc047b4500536 Sun Sparc architecture: http://security.debian.org/pool/updates/main/g/gtksee/gtksee_0.5.0-6_sparc.deb Size/MD5 checksum: 117670 a3644e7ec17ebecb5db9eb4224cacb1c -- Debian GNU/Linux unstable alias sid -- Reportedly, this will be fixed soon. Provided and/or discovered by: Viliam Holub Original Advisory: http://www.debian.org/security/2003/dsa-337

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

2nd Dec, 2008

New advisories:	14
New vulnerabilities:	21
Updated advisories:	26

Less // 391 views

Linksys WRT160N Cross-Site Scripting Vulnerability

Less // 372 views

IBM Rational ClearQuest Multiple Vulnerabilities

Not // 296 views

Debian update for flamethrower

Not // 285 views

flamethrower Insecure Temporary Files

Less // 343 views

IBM Rational ClearCase Cross-Site Scripting Vulnerability

Not // 332 views

DAHDI "ZT_SPANCONFIG" IOCTL Privilege Escalation Vulnerability

Not // 326 views

Zaptel "ZT_SPANCONFIG" IOCTL Privilege Escalation Vulnerabilities

Moderately // 314 views

Rumpus Multiple Vulnerabilities

Less // 330 views

bcoos "cid" SQL Injection Vulnerability

Moderately // 345 views

ASP Portal "ASPPortal.mdb" Database Disclosure Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.