CVE-2005-3178
Fixed in a distro release EPSS 4%
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
Products: xli, xloadimage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xli | 1.17.0-20 |
| Debian 12 | xloadimage | 4.1-15 |
| Debian 13 | xli | 1.17.0-20 |
| Debian 13 | xloadimage | 4.1-15 |
| Debian 14 | xli | 1.17.0-20 |
| Debian 14 | xloadimage | 4.1-15 |
| Debian 3.0 | xli | 1.17.0-11woody2 |
| Debian 3.0 | xloadimage | 4.1-10woody2 |
| Debian 3.1 | xli | 1.17.0-18sarge1 |
| Debian 3.1 | xloadimage | 4.1-14.3 |
| Red Hat Enterprise Linux 3 | xloadimage | 0:4.1-36.RHEL3 |
| Red Hat Enterprise Linux 3 | xloadimage-debuginfo | 0:4.1-36.RHEL3 |
| Red Hat Enterprise Linux 4 | xloadimage | 0:4.1-36.RHEL4 |
| Red Hat Enterprise Linux 4 | xloadimage-debuginfo | 0:4.1-36.RHEL4 |