Package name
WindowMaker
Date
2002-12-02
Advisory ID
MDKSA-2002:085
Affected versions
8.1 i586 , 8.1 i586 , 8.0 i586 , 9.0 i586 , 8.2 i586 , 8.0 i586 , 8.2 i586 , 7.2 i586

Problem description

Al Viro discovered a vulnerability in the WindowMaker window manager. A function used to load images, for example when configuring a new background image or previewing themes, contains a buffer overflow. The function calculates the amount of memory necessary to load the image by doing some multiplication but does not check the results of this multiplication, which may not fit into the destination variable, resulting in a buffer overflow when the image is loaded.

Updated packages

8.1 i586

 7016ab7cc8f55fc3abb2f8f08bf03d66  ia64/8.1/RPMS/libwraster2-0.65.1-4.1mdk.ia64.rpm
806400eb12b72d8cad2845b47c12a2e9  ia64/8.1/RPMS/libwraster2-devel-0.65.1-4.1mdk.ia64.rpm
88e98085ddd466d939896f4191ffa6c5  ia64/8.1/RPMS/WindowMaker-0.65.1-4.1mdk.ia64.rpm
98e0ff6e8fa7420bfac14add1f759df8  ia64/8.1/RPMS/WindowMaker-devel-0.65.1-4.1mdk.ia64.rpm
ad4c2cb5d734a8b6cfe8f14e6722ca9d  ia64/8.1/SRPMS/WindowMaker-0.65.1-4.1mdk.src.rpm

8.1 i586

 f7e65b62ecb92a4fab5b9d8f43c2419d  8.1/RPMS/libwraster2-0.65.1-4.1mdk.i586.rpm
8fd50f1d15a9462c89d4ecddf5d17883  8.1/RPMS/libwraster2-devel-0.65.1-4.1mdk.i586.rpm
a6bbc3c084d03e6f38ecadee67749f75  8.1/RPMS/WindowMaker-0.65.1-4.1mdk.i586.rpm
432e196b3d9f858101507e0f29960661  8.1/RPMS/WindowMaker-devel-0.65.1-4.1mdk.i586.rpm
ad4c2cb5d734a8b6cfe8f14e6722ca9d  8.1/SRPMS/WindowMaker-0.65.1-4.1mdk.src.rpm

8.0 i586

 73b42b8dd3107b28cc882f610dd43692  8.0/RPMS/libwraster2-0.64.0-8.2mdk.i586.rpm
ae3dfc4cb88016551a19efd60daf240d  8.0/RPMS/libwraster2-devel-0.64.0-8.2mdk.i586.rpm
34f6c77e85ef874eb5fbc111b2c4c7e7  8.0/RPMS/WindowMaker-0.64.0-8.2mdk.i586.rpm
0bc2349d2baa3169ed63ac984351559b  8.0/RPMS/WindowMaker-devel-0.64.0-8.2mdk.i586.rpm
c238a7e210dcdee58e94f9e83c37fda5  8.0/SRPMS/WindowMaker-0.64.0-8.2mdk.src.rpm

9.0 i586

 169997bae934ac883f0b62f6eb56fd59  9.0/RPMS/libwraster2-0.80.1-2.1mdk.i586.rpm
e89a58fc1a11278918df79481ba6770a  9.0/RPMS/libwraster2-devel-0.80.1-2.1mdk.i586.rpm
64d742a652f615f3adea60373509bc1b  9.0/RPMS/libwraster2-static-devel-0.80.1-2.1mdk.i586.rpm
ec24826b0413e41985bd68a7e63c7b97  9.0/RPMS/WindowMaker-0.80.1-2.1mdk.i586.rpm
48db9befa688eba20b269e57df9c45b4  9.0/RPMS/WindowMaker-devel-0.80.1-2.1mdk.i586.rpm
ec25099ccfad3db73e40a223ecd832e5  9.0/RPMS/WindowMaker-static-devel-0.80.1-2.1mdk.i586.rpm
c975c55204326163dc9ad4224f4ae8b3  9.0/SRPMS/WindowMaker-0.80.1-2.1mdk.src.rpm

8.2 i586

 81e22b38361de3f001929cc06ce477de  8.2/RPMS/libwraster2-0.80.0-5.1mdk.i586.rpm
175dc344f4f853229603d007b392653d  8.2/RPMS/libwraster2-devel-0.80.0-5.1mdk.i586.rpm
bf1133b3cfcbe2730a53da128a7e4a49  8.2/RPMS/libwraster2-static-devel-0.80.0-5.1mdk.i586.rpm
796dcf4d3fea42aefa46b9eb74d0bea1  8.2/RPMS/WindowMaker-0.80.0-5.1mdk.i586.rpm
31a1977b9f702bca900d3c37b34d463c  8.2/RPMS/WindowMaker-devel-0.80.0-5.1mdk.i586.rpm
86d13e918c33a3fa65d46f16e071994d  8.2/RPMS/WindowMaker-static-devel-0.80.0-5.1mdk.i586.rpm
161c1b5771666371d29164e54f548b37  8.2/SRPMS/WindowMaker-0.80.0-5.1mdk.src.rpm

8.0 i586

 8443097e1aad1f918c00bf26534c0d81  ppc/8.0/RPMS/libwraster2-0.64.0-8.2mdk.ppc.rpm
ae3002e0bec7862f40b3df45a5c56228  ppc/8.0/RPMS/libwraster2-devel-0.64.0-8.2mdk.ppc.rpm
70c813f7d7bd7c691202faee4b574b1c  ppc/8.0/RPMS/WindowMaker-0.64.0-8.2mdk.ppc.rpm
4ec1af21d6319c176f3b922339e1f6d4  ppc/8.0/RPMS/WindowMaker-devel-0.64.0-8.2mdk.ppc.rpm
c238a7e210dcdee58e94f9e83c37fda5  ppc/8.0/SRPMS/WindowMaker-0.64.0-8.2mdk.src.rpm

8.2 i586

 ace0e30fd4a2492931afbd7b07c08088  ppc/8.2/RPMS/libwraster2-0.80.0-5.1mdk.ppc.rpm
694b73dbce8dacb256cb5dad71c153ca  ppc/8.2/RPMS/libwraster2-devel-0.80.0-5.1mdk.ppc.rpm
b40ccbf4c0a26bbdca6ca2a87f683f57  ppc/8.2/RPMS/libwraster2-static-devel-0.80.0-5.1mdk.ppc.rpm
cd3cf73d2849d8ab1c39d67cfa93549e  ppc/8.2/RPMS/WindowMaker-0.80.0-5.1mdk.ppc.rpm
c7f22a7c199f0dd42ec6dabe86a09c02  ppc/8.2/RPMS/WindowMaker-devel-0.80.0-5.1mdk.ppc.rpm
e8e376b56f6493e6411f5e631a81efec  ppc/8.2/RPMS/WindowMaker-static-devel-0.80.0-5.1mdk.ppc.rpm
161c1b5771666371d29164e54f548b37  ppc/8.2/SRPMS/WindowMaker-0.80.0-5.1mdk.src.rpm

7.2 i586

 a414464d3929301a8cbdd5c1a6e4a3c0  7.2/RPMS/WindowMaker-0.62.1-18.2mdk.i586.rpm
4dbe5c40404ecc73759f7054af15f083  7.2/RPMS/WindowMaker-devel-0.62.1-18.2mdk.i586.rpm
ffeb280726170815054d8553c3245bc8  7.2/SRPMS/WindowMaker-0.62.1-18.2mdk.src.rpm

References