Secunia

Ariel Berkman has reported a vulnerability in xloadimage, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in handling the title of a NIFF image when performing zoom, reduce, or rotate functions. This can be exploited to cause a stack-based buffer overflow and may allow arbitrary code execution via a malicious NIFF image with an overly long title.

The vulnerability has been reported in version 4.1. Other versions may also be affected.

Solution
Restrict use to only trusted NIFF images.

Provided and/or discovered by
Ariel Berkman

Changelog
Further details available in Customer Area

Original Advisory
Debian:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332524

Deep Links
Links available in Customer Area