Summary
It was discovered that libXpm incorrectly handled certain XPM files. If a
user or automated system were tricked into opening a specially crafted XPM
file, a remote attacker could use this issue to cause libXpm to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libxpm | 1:3.5.10-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libxpm | 1:3.5.11-1ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform…
References
-
report
https://ubuntu.com/security/CVE-2016-10164