XV Planetary Data System Image Decoder Format String Vulnerability

Bugtraq ID:	13245
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 19 2005 12:00AM
Updated:	Apr 19 2005 12:00AM
Credit:	Tavis Ormandy is credited with the discovery of these issues.
Vulnerable:	John Bradley XV 3.10 a + Gentoo Linux + Slackware Linux 10.1 + Slackware Linux 10.0 + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current
Not Vulnerable:

XV Planetary Data System Image Decoder Format String Vulnerability

A remote, client-side format string vulnerability affects xv. This issue is due to a failure of the application to securely implement a formatted printing function.

An attacker may leverage this issue to execute arbitrary code with the privileges of an unsuspecting user that activated the vulnerable utility.

XV Planetary Data System Image Decoder Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

XV Planetary Data System Image Decoder Format String Vulnerability

Solution:
Gentoo Linux has released advisory GLSA 200504-17 dealing with this and other issues. Gentoo advises that all XV users should upgrade to the latest version by executing the following commands with superuser privileges:

emerge --sync
emerge --ask --oneshot --verbose ">=media-gfx/xv-3.10a-r11"

For more information, please see the referenced Gentoo Linux advisory.

XV Planetary Data System Image Decoder Format String Vulnerability

References:

• XV Homepage (John Bradley)