Bugzilla Bug 81505

TITLE:
XView "xv_parse_one()" Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA14213

VERIFY ADVISORY:
http://secunia.com/advisories/14213/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

SOFTWARE:
XView 3.x
http://secunia.com/product/4632/

DESCRIPTION:
Erik Sj?lund has reported a vulnerability in XView, which potentially
can be exploited by malicious, local users to gain escalated
privileges.

The vulnerability is caused due to some boundary errors in the
function "xv_parse_one()" in "xv_parse.c". This may be exploited to
cause a buffer overflow and execute arbitrary code with escalated
privileges via a setuid application linked against the vulnerable
library.

SOLUTION:
Grant only trusted users access to affected systems.

PROVIDED AND/OR DISCOVERED BY:
Erik Sj?lund

ORIGINAL ADVISORY:
http://www.debian.org/security/2005/dsa-672

*** This bug has been marked as a duplicate of 78118 ***