Bug 187402

Summary:	CVE-2006-1550 Dia multiple buffer overflows
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	dia	Assignee:	Caolan McNamara <caolanm>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4	CC:	deisenst
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	reported=20060329,source=secalert,public=20060329,impact=moderate
Fixed In Version:	dia-0.94-13.fc4	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-04-06 04:11:18 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	188108

Description Josh Bressers 2006-03-30 18:42:41 UTC

Dia multiple buffer overflows

infamous41md discovered three buffer overflows in Dia's xfig importer.
The issues are caused by unchecked input from the xfig file.

The patch can be found here:
http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html

Comment 1 Josh Bressers 2006-03-30 18:47:08 UTC

Attachment 127062 [details] is Demo Exploit #1

Attachment 127063 [details] is Demo Exploit #2

Attachment 127064 [details] is Demo Exploit #3

Comment 2 David Eisenstein 2006-04-06 04:11:18 UTC

Aan erratum was issued today for this issue by Caolan McNamara titled
FEDORA-2006-261.

<http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html>.

Closing this bug-ticket.