• info
• discussion
• exploit
• solution
• references

XLoadImage Compressed Image Command Execution Vulnerability

Solution:

Please see the referenced advisories for more information.


xli xli 1.17

• Debian xli_1.17.0-11woody1_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _alpha.deb


• Debian xli_1.17.0-11woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _arm.deb


• Debian xli_1.17.0-11woody1_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _hppa.deb


• Debian xli_1.17.0-11woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _i386.deb


• Debian xli_1.17.0-11woody1_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _ia64.deb


• Debian xli_1.17.0-11woody1_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _m68k.deb


• Debian xli_1.17.0-11woody1_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _mips.deb


• Debian xli_1.17.0-11woody1_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _mipsel.deb


• Debian xli_1.17.0-11woody1_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _powerpc.deb


• Debian xli_1.17.0-11woody1_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _s390.deb


• Debian xli_1.17.0-11woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/x/xli/xli_1.17.0-11woody1 _sparc.deb


• Mandriva xli-1.17.0-4.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-4.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.1.102mdk.i586.rpm
  Mandrake Linux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.1.102mdk.x86_64.rpm
  Mandrake Linux 10.2/x86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva xli-1.17.0-8.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www1.mandrivalinux.com/en/ftp.php3

xloadimage xloadimage 4.1

• Fedora xloadimage-4.1-34.FC2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora xloadimage-4.1-34.FC2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora xloadimage-4.1-34.FC3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora xloadimage-4.1-34.FC3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora xloadimage-debuginfo-4.1-34.FC2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora xloadimage-debuginfo-4.1-34.FC2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora xloadimage-debuginfo-4.1-34.FC3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora xloadimage-debuginfo-4.1-34.FC3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat xloadimage-4.1-21.2.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/xloadimage-4. 1-21.2.legacy.i386.rpm


• RedHat xloadimage-4.1-27.2.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/xloadimage-4.1- 27.2.legacy.i386.rpm


• RedHat xloadimage-4.1-29.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/xloadimage-4.1- 29.2.legacy.i386.rpm


• RedHat xloadimage-4.1-34.FC2.2.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/xloadimage-4.1- 34.FC2.2.legacy.i386.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xloadimage-4.1-22.i586.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/xloadimage-4.1-22.i586.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/xloadimage-4.1-22.i586.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd ates/RPMS/xloadimage-4.1-22.i586.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/xloadimage-4.1-22.i586.rpm


• TurboLinux xloadimage-4.1-22.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/xloadimage-4.1-22.i586.rpm