Unscored DSA-694-1 2 CVEs

xloadimage - missing input sanitising, integer overflow

Published Mar 21, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	xloadimage	4.1-10woody1

Vulnerabilities 2

Unscored —

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters …

xli xloadimage Debian

Mar 4, 2005
Unscored —

CVE-2005-0639

Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management…

xloadimage xli Debian

Mar 4, 2005