(Sun Issues Fix for Sun Java Desktop System) imlib2 BMP Decoding Buffer Overflow May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1011357 |
|
SecurityTracker URL: http://securitytracker.com/id/1011357
|
|
CVE Reference:
CAN-2004-0802
(Links to External Site)
|
Date: Sep 19 2004
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2003 and Release 2
|
Description:
A vulnerability was reported in imlib2 in the processing of BMP images. A remote user can cause imlib2 to crash or potentially execute arbitrary code. Sun Java Desktop System (JDS) is affected.
The vendor reported that a remote user can create a specially crafted BMP image file containing runlength-encoded images that, when decoded by the target user, will cause imlib2 to crash.
Marcus Meissner discovered this vulnerability.
A demonstration exploit image from Chris Evans is available at:
http://bugzilla.gnome.org/attachment.cgi?id=30933&action=view
|
Impact:
A remote user can create a BMP file that, when decoded by the target user, will cause imlib2 to crash. It may also be possible to cause arbitrary code to be executed. The specific impact depends on the application using imlib2.
|
Solution:
Sun has issued the following fixes for Sun Java Desktop System, which is affected by the imlib2 vulnerability:
Sun Java Desktop System (JDS) 2003 with the updated RPMs (patch-9338)
Sun Java Desktop System (JDS) Release 2 with the updated RPMs (patch-9338)
To download and install the updated RPMs from the update servers select the following from the launch bar:
Launch >> Applications >> System Tools >> Online Update
More information on obtaining updates is available at:
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q5
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q7
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-57645-1 (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Sat, 18 Sep 2004 16:09:42 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57645-1
|
Sun has issued a fix for Sun Java Desktop System (JDS) to correct a vulnerability
in imlib.
CVE: CAN-2004-0802, CAN-2004-0817
Sun Java Desktop System (JDS) 2003 and JDS Release 2 are affected on the Linux
platform.
Sun has issued the following fixes:
Sun Java Desktop System (JDS) 2003 with the updated RPMs (patch-9338)
Sun Java Desktop System (JDS) Release 2 with the updated RPMs (patch-9338)
To download and install the updated RPMs from the update servers select the following from the launch bar:
Launch >> Applications >> System Tools >> Online Update
More information on obtaining updates is available at:
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q5
http://wwws.sun.com/software/javadesktopsystem/faq.html#5q7
-----
Sun Alert ID: 57645
Synopsis: Security Vulnerabilities in imlib Library May Allow a Remote Unprivileged User to Execute Arbitrary Code
Category: Security
Product: Sun Java Desktop System (JDS)
BugIDs: 5099934
Avoidance: Patch
State: Resolved
Date Released: 17-Sep-2004
Date Closed: 17-Sep-2004
Date Modified:
|
|
