Debian
libxpm package

  1. Bug #13779
  2. Comment #18

Comment 18 for bug 13779

Revision history for this message
In , Branden Robinson (branden-deadbeast) wrote : Re: xfree86 4.1.0-16woody6 available to fix CAN-2005-0605

On Fri, Mar 11, 2005 at 03:35:32AM -0500, Branden Robinson wrote:
> The following URL contains source and binary packages for powerpc resolving
> CAN-2005-0605[1], which is described as:
>
> The XPM library's scan.c file may allow attackers to execute arbitrary code
> by crafting a malicious XPM image file containing a negative bitmap_unit
> value that provokes a buffer overflow.
>
> http://redwald.deadbeast.net/tmp/CAN-2005-0605/

Can someone tell me what the status of this is?

--
G. Branden Robinson | A celibate clergy is an especially
Free Software Developer | good idea, because it tends to
<email address hidden> | suppress any hereditary propensity
http://deadbeast.net/~branden/ | toward fanaticism. -- Carl Sagan