diff options
| author | stas <stas@FreeBSD.org> | 2006-11-09 01:13:43 +0800 |
|---|---|---|
| committer | stas <stas@FreeBSD.org> | 2006-11-09 01:13:43 +0800 |
| commit | 9a17359e789981e730de4dc23eb7ea5e08ef6720 (patch) | |
| tree | e59e21d6f1aabdc0772e714ffd83a9ef4bd39b98 | |
| parent | 75a086f573135d7c724743215c88f3db647af113 (diff) | |
| download | freebsd-ports-gnome-9a17359e789981e730de4dc23eb7ea5e08ef6720.tar.gz freebsd-ports-gnome-9a17359e789981e730de4dc23eb7ea5e08ef6720.tar.zst freebsd-ports-gnome-9a17359e789981e730de4dc23eb7ea5e08ef6720.zip | |
- Document recent vulerabilties in the imlib2.
| -rw-r--r-- | security/vuxml/vuln.xml | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 02c7c13f037f..1677d6f8b8a2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,44 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="92442c4b-6f4a-11db-bd28-0012f06707f0"> + <topic>Imlib2 -- multiple image file processing vulnerabilities</topic> + <affects> + <package> + <name>imlib2</name> + <range><lt>20060926_1,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/22732/"> + + <p>Some vulnerabilities have been reported in imlib2, which can be + exploited by malicious people to cause a DoS (Denial of Service) or + potentially compromise an application using the library.</p> + + <p>The vulnerabilities are caused due to unspecified errors within + the processing of JPG, ARGB, PNG, LBM, PNM, TIFF, and TGA images. + This may be exploited to execute arbitrary code by e.g. tricking a + user into opening a specially crafted image file with an + application using imlib2.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2006-4806</cvename> + <cvename>CVE-2006-4807</cvename> + <cvename>CVE-2006-4808</cvename> + <cvename>CVE-2006-4809</cvename> + <bid>20903</bid> + </references> + <dates> + <discovery>2006-11-03</discovery> + <entry>2006-11-08</entry> + </dates> + </vuln> + <vuln vid="ab8dbe98-6be4-11db-ae91-0012f06707f0"> <topic>ruby -- cgi.rb library Denial of Service</topic> <affects> |