Skip to Content.
Sympa Menu

sm-security - [SM-Security] dia: arbitrary code execution

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security <sm-security AT lists.ibiblio.org>
  • Subject: [SM-Security] dia: arbitrary code execution
  • Date: Sun, 13 Nov 2005 23:50:38 +0100

Synopsis
========
Improperly sanitised data in Dia allows remote attackers to execute
arbitrary code.

Background
==========
Dia is a program for creating diagrams of all kinds. The current version
can do UML class diagrams, Entity-Relationship modeling, network
diagrams, and much more.

Description
===========
CAN-2005-2966:
The Python SVG import plugin (diasvg_import.py) for dia and earlier
allows user-complicit attackers to execute arbitrary commands via a
crafted SVG file.

Impact
======
An attacker could create a specially crafted SVG file, which could lead
to the execution of arbitrary code when imported into dia.

Workaround
==========
There are no known workarounds at this time.

Affected packages
=================
This is now fixed in all grimoires.

Resolution
==========
All dia users should upgrade to the latest available version:
# scribe update
# cast -c dia

References
==========
[ 1 ] CAN-2005-2966
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2966
[ 2 ] GLSA 200510-06
http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml


--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36


Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] dia: arbitrary code execution, Thomas Houssin, 11/13/2005

Archive powered by MHonArc 2.6.24.

Top of Page