Description
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xli | 1.17.0-20 | — |
| Debian 14 | xloadimage | 4.1-15 | — |
| Debian 13 | xli | 1.17.0-20 | — |
| Debian 13 | xloadimage | 4.1-15 | — |
| Debian 12 | xli | 1.17.0-20 | — |
| Debian 12 | xloadimage | 4.1-15 | — |
| Debian 3.1 | xli | 1.17.0-18sarge1 | DSA-859-1 |
| Debian 3.1 | xloadimage | 4.1-14.3 | DSA-858-1 |
| Debian 3.0 | xli | 1.17.0-11woody2 | DSA-859-1 |
| Debian 3.0 | xloadimage | 4.1-10woody2 | DSA-858-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | xloadimage | 4.1-36.RHEL4 | RHSA-2005:802 |
| RHEL 3 | xloadimage | 4.1-36.RHEL3 | RHSA-2005:802 |
Advisories 3
- RHSA-2005:802 Red Hat Security Advisory: xloadimage security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-859-1 xli - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-858-1 xloadimage - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- 18491 third-party-advisory
- 17143 third-party-advisory
- 17124 third-party-advisory
- 17273 third-party-advisory
- 17282 third-party-advisory
- 18050 third-party-advisory
- MDKSA-2005:192 vendor-advisory
- 1015072 vdb-entry
- 15051 vdb-entry
- 18170 third-party-advisory
- oval:org.mitre.oval:def:10590 vdb-entry signature
- DSA-859 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-013.htm
- 17369 third-party-advisory
- GLSA-200510-26 vendor-advisory
- RHSA-2005:802 vendor-advisory
- SUSE-SR:2005:024 vendor-advisory
- 17139 third-party-advisory
- 20051005 xloadimage buffer overflow. mailing-list
- 17087 third-party-advisory
- FLSA-2006:152923 vendor-advisory
- DSA-858 vendor-advisory
- 17206 third-party-advisory
- 17140 third-party-advisory