CVE-2005-3178

MEDIUM 5.1CVE-2005-3178 · Published 07/10/2005 · updated 16/06/2026

In short

CVE-2005-3178 is a MEDIUM (CVSS 5.1) vulnerability affecting xloadimage (xloadimage).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xloadimage xloadimage	`≤ 4.1`	No fix yet

Description

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.

References

ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.62/SCOSA-2005.62.txt
ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.56/SCOSA-2005.56.txt
marc.info
secunia.com/advisories/17087 · Vendor Advisory
secunia.com/advisories/17124
secunia.com/advisories/17139
secunia.com/advisories/17140
secunia.com/advisories/17143
secunia.com/advisories/17206
secunia.com/advisories/17273
secunia.com/advisories/17282
secunia.com/advisories/17369
secunia.com/advisories/18050
secunia.com/advisories/18170
secunia.com/advisories/18491
securitytracker.com/id

More vulnerabilities in xloadimage

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free