8 results · Feed
-
High 7.8
Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren->pPal = g_new0(WPGColorRGB, 256); When handling a WPG_COLORMAP reco…
-
High 7.8
Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus_load() reads the number of bus handles from the file attribute "bus_handles" using attri…
-
Unscored —
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current enco…
-
Unscored —
Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users…
-
Unscored —
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set o…
-
Unscored —CVE-2006-2480 Public exploit
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibl…
-
Unscored —
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-ass…
-
Unscored —
The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbi…