• info
• discussion
• exploit
• solution
• references

DIA XFIG File Import Multiple Remote Buffer Overflow Vulnerabilities

Solution:
The vendor has released version 0.95-pre6 along with a patch for 0.94 to address these issues.

Version 0.95-pre6 is available from the Gnome CVS tree. The patch is available in the Gnome web reference (Vulnerability in xfig import code).

Please see the references for more information and vendor advisories.


DIA DIA 0.94

• Mandriva dia-0.94-6.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva dia-0.94-6.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://wwwnew.mandriva.com/en/downloads/


• RedHat Fedora dia-0.94-13.fc4.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora dia-0.94-13.fc4.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora dia-0.94-13.fc4.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora dia-debuginfo-0.94-13.fc4.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora dia-debuginfo-0.94-13.fc4.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora dia-debuginfo-0.94-13.fc4.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• Ubuntu dia-common_0.94.0-11ubuntu1.1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-11 ubuntu1.1_all.deb


• Ubuntu dia-common_0.94.0-5ubuntu1.2_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-5u buntu1.2_all.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.1_amd64.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.1_i386.deb


• Ubuntu dia-gnome_0.94.0-11ubuntu1.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.1_powerpc.deb


• Ubuntu dia-gnome_0.94.0-5ubuntu1.2_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.2_amd64.deb


• Ubuntu dia-gnome_0.94.0-5ubuntu1.2_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.2_i386.deb


• Ubuntu dia-gnome_0.94.0-5ubuntu1.2_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.2_powerpc.deb


• Ubuntu dia-libs_0.94.0-11ubuntu1.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.1_amd64.deb


• Ubuntu dia-libs_0.94.0-11ubuntu1.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.1_i386.deb


• Ubuntu dia-libs_0.94.0-11ubuntu1.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.1_powerpc.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.2_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.2_amd64.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.2_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.2_i386.deb


• Ubuntu dia-libs_0.94.0-5ubuntu1.2_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.2_powerpc.deb


• Ubuntu dia_0.94.0-11ubuntu1.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.1_amd64.deb


• Ubuntu dia_0.94.0-11ubuntu1.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.1_i386.deb


• Ubuntu dia_0.94.0-11ubuntu1.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.1_powerpc.deb


• Ubuntu dia_0.94.0-5ubuntu1.2_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.2_amd64.deb


• Ubuntu dia_0.94.0-5ubuntu1.2_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.2_i386.deb


• Ubuntu dia_0.94.0-5ubuntu1.2_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.2_powerpc.deb

DIA DIA 0.93

• Ubuntu dia-common_0.93-4ubuntu2.1_all.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.93-4ubu ntu2.1_all.deb


• Ubuntu dia-gnome_0.93-4ubuntu2.1_amd64.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.93-4ubun tu2.1_amd64.deb


• Ubuntu dia-gnome_0.93-4ubuntu2.1_i386.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.93-4ubun tu2.1_i386.deb


• Ubuntu dia-gnome_0.93-4ubuntu2.1_powerpc.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.93-4ubun tu2.1_powerpc.deb


• Ubuntu dia-libs_0.93-4ubuntu2.1_amd64.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.93-4ubunt u2.1_amd64.deb


• Ubuntu dia-libs_0.93-4ubuntu2.1_i386.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.93-4ubunt u2.1_i386.deb


• Ubuntu dia-libs_0.93-4ubuntu2.1_powerpc.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.93-4ubunt u2.1_powerpc.deb


• Ubuntu dia_0.93-4ubuntu2.1_amd64.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.93-4ubuntu 2.1_amd64.deb


• Ubuntu dia_0.93-4ubuntu2.1_i386.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.93-4ubuntu 2.1_i386.deb


• Ubuntu dia_0.93-4ubuntu2.1_powerpc.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.93-4ubuntu 2.1_powerpc.deb

DIA DIA 0.92.2

• Mandriva dia-0.92.2-2.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva dia-0.92.2-2.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://wwwnew.mandriva.com/en/downloads/