CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows

Debian Bug report logs - #546730
CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Giuseppe Iuculano <giuseppe@iuculano.it>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2007-6732: Buffer overflow in DTT file loader

Date: Tue, 15 Sep 2009 13:02:25 +0200

Package: xmp
Version: 2.0.4d-11
Severity: serious
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for xmp.

CVE-2007-6731[0]:
| Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers
| to execute arbitrary code via an OXM file with a negative value, which
| bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in
| misc/oxm.c, leading to a buffer overflow.

This is already fixed in debian unstable.
Please coordinate with the security team (team@security.debian.org) to
prepare packages for the stable and oldstable releases.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6731
    http://security-tracker.debian.net/tracker/CVE-2007-6731

Cheers,
Giuseppe.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqvdDoACgkQNxpp46476aot0gCeKr7w18XoPG1yyirwc2sfsnNC
88kAn3fVbLhhpWt8EgFAI/dvxWdrllp0
=WBlF
-----END PGP SIGNATURE-----

Message #10 received at 546730@bugs.debian.org (full text, mbox, reply):

From: Giuseppe Iuculano <giuseppe@iuculano.it>

To: 546730@bugs.debian.org

Cc: control@bugs.debian.org

Subject: CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows

Date: Tue, 15 Sep 2009 13:28:09 +0200

[Message part 1 (text/plain, inline)]

retitle 546730 CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows
tag 546730 lenny etch
fixed 546730 2.6.1-1
thanks


Hi,
the following CVE (Common Vulnerabilities & Exposures) ids were
published for xmp.

CVE-2007-6731[0]:
| Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers
| to execute arbitrary code via an OXM file with a negative value, which
| bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in
| misc/oxm.c, leading to a buffer overflow.

CVE-2007-6732[1]:
| Multiple buffer overflows in the dtt_load function in
| loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier
| allow remote attackers to execute arbitrary code via unspecified
| vectors related to an untrusted length value and the (1) pofs and (2)
| plen arrays.


These are already fixed in Debian unstable.
Please coordinate with the security team (team@security.debian.org) to
prepare packages for the stable and oldstable releases.


If you fix the vulnerabilities please also make sure to include the
CVE ids in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6731
    http://security-tracker.debian.net/tracker/CVE-2007-6731
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6732
    http://security-tracker.debian.net/tracker/CVE-2007-6732

[signature.asc (application/pgp-signature, attachment)]

Message #21 received at 546730@bugs.debian.org (full text, mbox, reply):

From: gurkan <gurkan@phys.ethz.ch>

To: Claudio Matsuoka <cmatsuoka@gmail.com>

Cc: <546730@bugs.debian.org>, <team@security.debian.org>

Subject: Re: xmp 2.7.0

Date: Wed, 23 Sep 2009 11:48:51 +0200

Hello Claudio

Thank you very much. I will try it out and report my results.

I'm really bad with patching stuff and the like, would it be possible for
you
to provide a tarball of this version of xmp (2.0.4d and 2.5.1)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546730
to address the problems? That would be fantastic.

Yours,
Guerkan

> You can retrieve it from the sourceforge git, but I'm attaching a
> snapshot version just in case. I've just received some bug reports
> regarding builds in OSX and Solaris, but it seems that in Linux it is
> working well.
> 
> Best regards,
> Claudio
> 
> 
> On Tue, Sep 22, 2009 at 10:51 AM, Gürkan Sengün <gurkan@phys.ethz.ch>
> wrote:
>> Hello Claudio
>>
>> Where can I get a xmp 3.x version to try? How's the 3.x going?
>>
>> Yours,
>> Guerkan
>>

Message #26 received at 546730@bugs.debian.org (full text, mbox, reply):

From: Gürkan Sengün <gurkan@phys.ethz.ch>

To: 8510@bugs.debian.org, 546730@bugs.debian.org, 191109@bugs.debian.org

Subject: SPONSOR WANTED - new version available

Date: Thu, 28 Jan 2010 14:03:11 +0100

http://gnu.ethz.ch/debian/xmp/310/xmp_3.1.0-1.dsc

Message #37 received at 546730@bugs.debian.org (full text, mbox, reply):

From: Gürkan Sengün <gurkan@phys.ethz.ch>

To: 546730@bugs.debian.org

Subject: CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows

Date: Mon, 13 Feb 2012 10:04:59 +0100

didn't security support for oldstable end by the last monday? can this bug be 
closed because of that?

yours,
gurkan

Message #42 received at 546730-done@bugs.debian.org (full text, mbox, reply):

From: Gürkan Sengün <gurkan@phys.ethz.ch>

To: 546730-done@bugs.debian.org

Subject: CVE-2007-6731, CVE-2007-6732: Multiple buffer overflows

Date: Thu, 16 Feb 2012 12:22:12 +0100

this is not relevant anymore.

gurkan

Send a report that this bug log contains spam.