BID:11778

FreeImage Interleaved Bitmap Image Buffer Overflow Vulnerability

Info

FreeImage Interleaved Bitmap Image Buffer Overflow Vulnerability

Bugtraq ID:	11778
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 26 2004 12:00AM
Updated:	Nov 26 2004 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	FreeImage FreeImage 3.5 .0 FreeImage FreeImage 3.4 .0 FreeImage FreeImage 3.3 .0 FreeImage FreeImage 3.2.1 FreeImage FreeImage 3.2 .0 FreeImage FreeImage 3.1 .0 FreeImage FreeImage 3.0.4 FreeImage FreeImage 3.0.3 FreeImage FreeImage 3.0.2 FreeImage FreeImage 3.0.1 FreeImage FreeImage 3.0 .0

Not Vulnerable:	FreeImage FreeImage 3.5.1

Discussion

FreeImage Interleaved Bitmap Image Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in FreeImage. This issue is due to a boundary condition error that is presented when the library handles malformed Interleaved Bitmap (ILBM) images.

This issue could potentially be exploited to execute arbitrary code in the context of an application that uses the library.

Exploit / POC

FreeImage Interleaved Bitmap Image Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

FreeImage Interleaved Bitmap Image Buffer Overflow Vulnerability

Solution:
This issue has been addressed in version 3.5.1.

FreeImage FreeImage 3.0 .0