bugtraq - Buffer overflows in Dia XFig import

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060329212742.17764.qmail@securityfocus.com>
Date: 29 Mar 2006 21:27:42 -0000
From: lars@...der.dk
To: bugtraq@...urityfocus.com
Subject: Buffer overflows in Dia XFig import

A security review kindly performed by infamous41md has turned up three buffer overflow vulnerabilities in the XFig import plug-in in Dia, a diagramming tool for Gtk that runs on both Winddows and Unix.  While the XFig format is not the native format of Dia, a specially crafted XFig file could cause arbitrary code execution *if* loaded into Dia.

The vulnerabilities affect versions 0.87 through 0.94 as well as prereleases 1-5 of 0.95, after which it is fixed in the source and later prereleases.  A patch against the 0.94 release has been attached to the announcement on the dia-list at http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html

-Lars Clausen
Head Dia maintainer