Input validation error in librsvg - CVE-2010-0405
Published: September 28, 2010 / Updated: August 4, 2020
Vulnerability identifier: #VU33981
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2010-0405
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Affected software
librsvg
Gentoo Linux
Slackware Linux
dovecot (Alpine package)
boost (Alpine package)
links (Alpine package)
librsvg (Alpine package)
Gentoo Linux
Slackware Linux
dovecot (Alpine package)
boost (Alpine package)
links (Alpine package)
librsvg (Alpine package)
How to mitigate CVE-2010-0405
Install update from vendor's website.
dovecot (Alpine package) - addressed in versions 1.2.13-r2, 1.2.14-r0
links (Alpine package) - update to 2.2-r1
librsvg (Alpine package) - update to 2.26.0-r2
links (Alpine package) - update to 2.2-r1
librsvg (Alpine package) - update to 2.26.0-r2
External References
- http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow
- http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
- http://marc.info/?l=oss-security&m=128506868510655&w=2
- http://secunia.com/advisories/41452
- http://secunia.com/advisories/41505
- http://secunia.com/advisories/42350
- http://secunia.com/advisories/42404
- http://secunia.com/advisories/42405
- http://secunia.com/advisories/42529
- http://secunia.com/advisories/42530
- http://secunia.com/advisories/48378
- http://security.gentoo.org/glsa/glsa-201301-05.xml
- http://support.apple.com/kb/HT4581
- http://www.bzip.org/
- http://www.redhat.com/support/errata/RHSA-2010-0703.html
- http://www.redhat.com/support/errata/RHSA-2010-0858.html
- http://www.securityfocus.com/archive/1/515055/100/0/threaded
- http://www.ubuntu.com/usn/usn-986-1
- http://www.ubuntu.com/usn/USN-986-2
- http://www.ubuntu.com/usn/USN-986-3
- http://www.vmware.com/security/advisories/VMSA-2010-0019.html
- http://www.vupen.com/english/advisories/2010/2455
- http://www.vupen.com/english/advisories/2010/3043
- http://www.vupen.com/english/advisories/2010/3052
- http://www.vupen.com/english/advisories/2010/3073
- http://www.vupen.com/english/advisories/2010/3126
- http://www.vupen.com/english/advisories/2010/3127
- http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/
- https://bugzilla.redhat.com/show_bug.cgi?id=627882
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231