Bugtraqmailing list archives

By Date

By Thread

[ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Gentoo Linux Security Advisory                           GLSA 200412-17- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -http://security.gentoo.org/- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  Severity: Normal     Title: kfax: Multiple overflows in the included TIFF library      Date: December 19, 2004      Bugs: #73795        ID: 200412-17- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Synopsis========kfax contains several buffer overflows potentially leading to executionof arbitrary code.Background==========KDE is a feature-rich graphical desktop environment for Linux andUnix-like Operating Systems. kfax (part of kdegraphics) is the KDE faxfile viewer.Affected packages=================    -------------------------------------------------------------------     Package               /  Vulnerable  /                 Unaffected    -------------------------------------------------------------------  1  kde-base/kdegraphics       < 3.3.1                    Vulnerable!    -------------------------------------------------------------------     NOTE: Certain packages are still vulnerable. See Workaround.Description===========Than Ngo discovered that kfax contains a private copy of the TIFFlibrary and is therefore subject to several known vulnerabilities (seeReferences).Impact======A remote attacker could entice a user to view a carefully-crafted TIFFimage file with kfax, which would potentially lead to execution ofarbitrary code with the rights of the user running kfax.Workaround==========The KDE Team recommends to remove the kfax binary as well as thekfaxpart.la KPart:    rm /usr/kde/3.*/lib/kde3/kfaxpart.la    rm /usr/kde/3.*/bin/kfaxNote: This will render the kfax functionality useless, if kfaxfunctionality is needed you should upgrade to the KDE 3.3.2 which isnot stable at the time of this writing.Resolution==========All kfax users should use the workaround as no patches are availableyet.References==========  [ 1 ] KDE Security Advisory: kfax libtiff vulnerabilitieshttp://www.kde.org/info/security/advisory-20041209-2.txt  [ 2 ] GLSA 200410-11http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml  [ 3 ] CAN-2004-0803http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0803  [ 4 ] CAN-2004-0804http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0804  [ 5 ] CAN-2004-0886http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0886Availability============This GLSA and any updates to it are available for viewing atthe Gentoo Security Website:http://security.gentoo.org/glsa/glsa-200412-17.xmlConcerns?=========Security is a primary focus of Gentoo Linux and ensuring theconfidentiality and security of our users machines is of utmostimportance to us. Any security concerns should be addressed tosecurity () gentoo org or alternatively, you may file a bug athttp://bugs.gentoo.org.License=======Copyright 2004 Gentoo Foundation, Inc; referenced textbelongs to its owner(s).The contents of this document are licensed under theCreative Commons - Attribution / Share Alike license.http://creativecommons.org/licenses/by-sa/2.0

Attachment:_bin
Description:

By Date

By Thread

Current thread:

• [ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF librarySune Kloppenborg Jeppesen (Dec 20)