Unscored severity · published Oct 7, 2005
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the…
–
CVSS
4%
EPSS
No
On KEV
Description
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XL
Xli · Xli
All versions, or not specified · source: NVD
XL
Xloadimage · Xloadimage
through 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3178
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3178
marc.info
http://marc.info/?l=bugtraq&m=112862493918840&w=2
Vendor Advisory
http://secunia.com/advisories/17087/
secunia.com
http://secunia.com/advisories/17124
secunia.com
http://secunia.com/advisories/17139
More from Xli
–
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly…
–
CVE-2005-0639
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be…
–
CVE-2001-0775
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or…