CVE-2014-9763

imlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted PNM file.

Various issues in imlib before 1.4.7 in the GIF loader (CVE-2014-9762, CVE-2014-9764) and PNM loader (CVE-2014-9763) could cause crashes.

The imlib2 package has been updated to version 1.4.7, fixing these issues and several other bugs.

This update for imlib2 fixes the following issues:

Security issues fixed:

• CVE-2016-3994: Potential DOS in giflib loader (bsc#973759)
• CVE-2016-3993: Off buy 1 in merge update (bsc#973761)
• CVE-2014-9764: fix segmentation fault when opening specifically crafted input (bsc#963797)
• CVE-2014-9763: Prevent division-by-zero crashes (bsc#963800)
• CVE-2011-5326: Ellipse of width 1 triggers crashes (bsc#974202)

Bugs fixed:

• bsc#977538: Fix various potential crashes

Jakub Wilk discovered an out of bounds read in the GIF loader implementation in Imlib2. An attacker could use this to cause a denial of service (application crash) or possibly obtain sensitive information. (CVE-2016-3994)

Yuriy M. Kaminskiy discovered an off-by-one error when handling coordinates in Imlib2. An attacker could use this to cause a denial of service (application crash). (CVE-2016-3993)

Yuriy M. Kaminskiy discovered that integer overflows existed in Imlib2 when handling images with large dimensions. An attacker could use this to cause a denial of service (memory exhaustion or application crash). (CVE-2014-9771, CVE-2016-4024)

Kevin Ryde discovered that the ellipse drawing code in Imlib2 would attempt to divide by zero when drawing a 2x1 ellipse. An attacker could use this to cause a denial of service (application crash). (CVE-2011-5326)

It was discovered that Imlib2 did not properly handled GIF images without colormaps. An attacker could use this to cause a denial of service (application crash). This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-9762)

It was discovered that Imlib2 did not properly handle some PNM images, leading to a division by zero. An attacker could use this to cause a denial of service (application crash). This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-9763)

It was discovered that Imlib2 did not properly handle error conditions when loading some GIF images. An attacker could use this to cause a denial of service (application crash). This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-9764)