Description
Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) the tiff_instantiate function processing a crafted TIFF file, (2) the png_instantiate function processing a crafted PNG file, and (3) the jpeg_instantiate function processing a crafted JPEG file, all which trigger a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | xemacs21 | 21.4.22-3 | — |
References
- 35348 third-party-advisory
- xemacs-jpeg-bo(51334) vdb-entry
- https://bugs.gentoo.org/show_bug.cgi?id=275397
- http://tracker.xemacs.org/XEmacs/its/issue534
- 35473 vdb-entry
- ADV-2009-1666 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=511994
- 55298 vdb-entry
- xemacs-tiff-bo(51332) vdb-entry
- xemacs-png-bo(51333) vdb-entry