Detections
Analytics
FreeBSD : sdl_image -- buffer overflow vulnerabilities (b1bcab7d-1880-11dd-a914-0016179b2dd5)
critical Nessus Plugin ID 32148
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Secunia reports :Two vulnerabilities have been reported in SDL_image, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library.
A boundary error within the LWZReadByte() function in IMG_gif.c can be exploited to trigger the overflow of a static buffer via a specially crafted GIF file.
A boundary error within the 'IMG_LoadLBM_RW()' function in IMG_lbm.c can be exploited to cause a heap-based buffer overflow via a specially crafted IFF ILBM file.
Solution
Update the affected package.See Also
Plugin Details
Severity: Critical
ID: 32148
File Name: freebsd_pkg_b1bcab7d188011dda9140016179b2dd5.nasl
Version: 1.14
Type: local
Family: FreeBSD Local Security Checks
Published: 5/9/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:sdl_image, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 5/2/2008
Vulnerability Publication Date: 1/24/2008
Reference Information
CVE: CVE-2007-6697, CVE-2008-0544