Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.

A buffer overflow was found in the kimgio library for KDE 3.3.1. An attacker could create a carefully crafted PCX image in such a way that it would cause kimgio to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1046 to this issue.

All users of kdelibs should upgrade to these updated packages, which contain a backported security patch to correct these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated kdelibs packages that fix a flaw in kimgio input validation are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

KDE is a graphical desktop environment for the X Window System.
Konqueror is the file manager for the K Desktop Environment.

A source code audit performed by the KDE security team discovered several vulnerabilities in the PCX and other image file format readers.

A buffer overflow was found in the kimgio library for KDE 3.4.0. An attacker could create a carefully crafted PCX image in such a way that it would cause kimgio to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1046 to this issue.

All users of kdelibs should upgrade to these updated packages, which contain a backported security patch to correct these issues.

Bruno Rohee discovered a buffer overflow in the PCX decoder of kimgio.
If an attacker tricked a user into loading a malicious PCX image with a KDE application, he could exploit this to execute arbitrary code with the privileges of the user opening the image.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A KDE Security Advisory reports :

kimgio contains a PCX image file format reader that does not properly perform input validation. A source code audit performed by the KDE security team discovered several vulnerabilities in the PCX and other image file format readers, some of them exploitable to execute arbitrary code.

Impact: Remotely supplied, specially crafted image files can be used to execute arbitrary code.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:393 advisory.

  - security flaw (CVE-2005-1046)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A buffer overflow in the PCX decoder of kimgio was discovered by Bruno Rohee. If an attacker could trick a user into loading a malicious PCX image with any KDE application, he could cause the execution of arbitrary code with the privileges of the user opening the image.

The provided packages have been patched to correct this issue.

In addition, the LE2005 packages contain fixes to configuring email into kbugreport, fixing a KDE crasher bug, fixing a kicondialog bug, a KHTML bug, and a knewsticker export symbol problem.

KDE security team discovered several vulnerabilities in the PCX and other image file format readers in the KDE core libraries, some of them exploitable to execute arbitrary code. To a small extent the packages in woody are affected as well.

The remote host is affected by the vulnerability described in GLSA-200504-22 (KDE kimgio: PCX handling buffer overflow)

    kimgio fails to properly validate input when handling PCX files.
  Impact :

    By enticing a user to load a specially crafted PCX image in a KDE     application, an attacker could execute arbitrary code.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
62258	Fedora Core 3 : kdelibs-3.3.1-2.12.FC3 (2005-350)	Nessus	Fedora Local Security Checks	high
21933	CentOS 4 : kdelibs (CESA-2005:393)	Nessus	CentOS Local Security Checks	high
20501	Ubuntu 5.04 : kdelibs vulnerability (USN-114-1)	Nessus	Ubuntu Local Security Checks	high
18828	FreeBSD : kdelibs -- kimgio input validation errors (06404241-b306-11d9-a788-0001020eed82)	Nessus	FreeBSD Local Security Checks	high
18279	RHEL 4 : kdelibs (RHSA-2005:393)	Nessus	Red Hat Local Security Checks	critical
18274	Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:085)	Nessus	Mandriva Local Security Checks	high
18143	Debian DSA-714-1 : kdelibs - several vulnerabilities	Nessus	Debian Local Security Checks	high
18125	GLSA-200504-22 : KDE kimgio: PCX handling buffer overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-1046

critical

Tenable Plugins

high

high

high

high

critical

high

high

high