Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. (CVE-2009-2688) Additionally two non-security bugs were fixed that enable xeamcs to use the configured fonts.

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. (CVE-2009-2688) Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts.

リモートホストは GLSA-201006-15（XEmacs：ユーザー支援の任意のコードの実行）で説明されている脆弱性の影響を受けます。

Tielei Wang 氏は、glyphs-eimage.c の tiff_instantiate()、png_instantiate()、jpeg_instantiate() 関数すべてにおける複数の整数オーバーフローにより、ヒープベースのバッファオーバーフローが引き起こされる可能性があることを報告しています。
 影響：

リモートの攻撃者がユーザーを誘導し、XEmacs を使用して特別に細工された TIFF、JPEG、あるいは PNG ファイルを開かせることにより、アプリケーションを実行しているユーザーの権限を使用して任意のコードをリモートで実行したり、サービス拒否を引き起こす可能性があります。
 回避策：

現時点で、既知の回避策はありません。

特別に細工された tiff、png および jpeg 画像は、xemacs における整数オーバーフローを引き起こし、システムを危険に晒す可能性があります。（CVE-2009-2688）さらに 2 つのセキュリティ関連以外のバグが修正され、xeamcs は構成されたフォントを使用することが可能になります。

特别构建的 tiff、png 和 jpeg 图像可能会导致 xemacs 中出现整数溢出，并且对系统造成潜在的破坏。(CVE-2009-2688) 修复了其他两个非安全缺陷，以支持 xeamcs 使用已配置的字体。

特製的 tiff、png 與 jpeg 影像可造成 xemacs 中出現整數溢位，且系統可能遭到入侵。(CVE-2009-2688) 已修正其他兩個非安全性錯誤，進而讓 xeamcs 使用設定的字型。

The remote host is affected by the vulnerability described in GLSA-201006-15 (XEmacs: User-assisted execution of arbitrary code)

    Tielei Wang reported multiple integer overflow vulnerabilities in the     tiff_instantiate(), png_instantiate() and jpeg_instantiate() functions     in glyphs-eimage.c, all possibly leading to heap-based buffer     overflows.
  Impact :

    A remote attacker could entice a user to open a specially crafted TIFF,     JPEG or PNG file using XEmacs, possibly resulting in the remote     execution of arbitrary code with the privileges of the user running the     application, or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - xemacs: multiple integer overflow flaws (CVE-2009-2688)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size. The update also addresses multiple font issues, some of which cause warnings on startup. Some warnings remain, however, unless an ISO8859-13 fonts (e.g., terminus) is installed.
Also note that some warnings remain on Rawhide pending a resolution for bz 507637.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
41461	SuSE 11 Security Update : XEmacs (SAT Patch Number 1183)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
42040	openSUSE 10 Security Update : xemacs (xemacs-6412)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	critical
46804	GLSA-201006-15：XEmacs：ユーザー支援の任意のコード実行	Nessus	Gentoo Local Security Checks	2010/6/4	2021/1/6	critical
51765	SuSE 10 セキュリティ更新：XEmacs（ZYPP パッチ番号 6413）	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	critical
51765	SuSE 10 安全更新：XEmacs（ZYPP 修补程序编号 6413）	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	critical
51765	SuSE 10 安全性更新：XEmacs (ZYPP 修補程式編號 6413)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	critical
46804	GLSA-201006-15 : XEmacs: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	2010/6/4	2021/1/6	critical
40785	openSUSE Security Update : xemacs (xemacs-1182)	Nessus	SuSE Local Security Checks	2009/8/27	2021/1/14	critical
40791	openSUSE Security Update : xemacs (xemacs-1182)	Nessus	SuSE Local Security Checks	2009/8/27	2021/1/14	critical
198413	RHEL 4 : xemacs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
40865	Fedora 11 : xemacs-21.5.29-2.fc11 (2009-8993)	Nessus	Fedora Local Security Checks	2009/9/4	2021/1/11	critical
40866	Fedora 10 : xemacs-21.5.28-10.fc10 (2009-8997)	Nessus	Fedora Local Security Checks	2009/9/4	2021/1/11	critical
51765	SuSE 10 Security Update : XEmacs (ZYPP Patch Number 6413)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

critical

critical