|
|
Imlib存在Heap破坏漏洞
发布时间：2002-03-25
更新时间：2002-03-25
严重程度：高
威胁程度：权限提升
错误类型：边界检查错误
利用方式：服务器模式
BUGTRAQ ID：4336
受影响系统Imlib Imlib 1.9
Imlib Imlib 1.9.1
Imlib Imlib 1.9.2
Imlib Imlib 1.9.3
Imlib Imlib 1.9.4
Imlib Imlib 1.9.5
Imlib Imlib 1.9.6
Imlib Imlib 1.9.7
Imlib Imlib 1.9.8
+ RedHat Linux 6.2
+ RedHat Linux 7.0
+ RedHat Linux 7.1
Imlib Imlib 1.9.9
Imlib Imlib 1.9.10
+ RedHat Linux 7.2
Imlib Imlib 1.9.11
Imlib Imlib 1.9.12 详细描述
Imlib是允许X11程序使用各种文件格式图象的库。
其中存在漏洞可以导致HEAP破坏，条件是由不正常的图象文件触发。
测试代码
尚无
解决方案
Red Hat 已经推出补丁程序：
Imlib Imlib 1.9:
Imlib Imlib 1.9.1:
Imlib Imlib 1.9.2:
Imlib Imlib 1.9.3:
Imlib Imlib 1.9.4:
Imlib Imlib 1.9.5:
Imlib Imlib 1.9.6:
Imlib Imlib 1.9.7:
Imlib Imlib 1.9.8:
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/imlib-cfgeditor-1.9.13-2.6.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/imlib-devel-1.9.13-2.6.x.alpha.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/imlib-cfgeditor-1.9.13-2.6.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/imlib-devel-1.9.13-2.6.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/imlib-cfgeditor-1.9.13-2.6.x.sparc.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/imlib-devel-1.9.13-2.6.x.sparc.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.0/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/imlib-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/imlib-devel-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.1/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-cfgeditor-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-devel-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-devel-1.9.13-2.7.x.ia64.rpm
Imlib Imlib 1.9.9:
Imlib Imlib 1.9.10:
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-devel-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.2/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
相关信息
参考：http://online.securityfocus.com/advisories/3987
|
