SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   zgv Vendors:   Marks, Russell
zgv Buffer Overflows Let Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1011951
SecurityTracker URL:  http://securitytracker.com/id/1011951
CVE Reference:   CVE-2004-1095   (Links to External Site)
Updated:  Dec 1 2004
Original Entry Date:  Oct 27 2004
Impact:   Execution of arbitrary code via network, User access via network
Exploit Included:  Yes  
Version(s): 5.5 was tested
Description:   Several heap overflow vulnerabilities were reported in the zgv image viewer software. A remote user can execute arbitrary code on the target system.

sean reported that a remote user can create a specially crafted image file that, when viewed, will trigger any of several overflows in the image parameter calculation process, leading to the execution of arbitrary code.

At least eleven separate overflows were reported, affecting the following files:

readbmp.c
readgif.c
readgif.c
readmrf.c
readpcx.c
readpng.c
readpnm.c
readprf.c
readtiff.c
readxpm.c
readxpm.c
readpcd.c

Impact:   A remote user can execute arbitrary code on the target system.
Solution:   No solution was available at the time of this entry.
Vendor URL:  www.svgalib.org/rus/zgv/ (Links to External Site)
Cause:   Boundary error
Underlying OS:  Linux (Any), UNIX (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Nov 7 2004 (Gentoo Issues Fix) zgv Buffer Overflows Let Remote Users Execute Arbitrary Code
Gentoo has released a fix.
Dec 16 2004 (Debian Issues Fix) zgv Buffer Overflows Let Remote Users Execute Arbitrary Code
Debian has released a fix.



 Source Message Contents

Subject:  zgv image viewing heap overflows


This is a multi-part message in MIME format.

--Multipart=_Mon__25_Oct_2004_21_07_17_-0400_OWkuQHb76W=99N4E
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

++++++++++++++++++++++++++++++++++++++++++++

Subject:

zgv multiple heap overflows

++++++++++++++++++++++++++++++++++++++++++++

Product:

zgv is a picture viewer with a thumbnail-based file selector, for the Linux and
FreeBSD console (it uses svgalib). It's pretty featureful, and is probably the
best svgalib-based viewer. (It can also be built to use SDL if you prefer.) Lots
of people have told me they like it, where "lots" = "oh, it must be at least two
or three", and you can't ask for a more ringing endorsement than that. Well, you
could, but I'm not sure you'd get it. :-)

zgv supports most popular formats, and allows panning and fit-to-screen methods
of viewing, slideshows, scaling, gamma adjustment, etc. 

http://www.svgalib.org/rus/zgv/

++++++++++++++++++++++++++++++++++++++++++++

Vulnerable:

I tested latest, zgv-5.5.orig.

++++++++++++++++++++++++++++++++++++++++++++

Summary:

zgv uses malloc() frequently to allocate memory for storing image data.  When
calculating how much to allocate, user supplied data from image headers is
multiplied and/or added without any checks for arithmetic overflows.  We can
overflow numerous calculations, and cause small buffers to be allocated.  Then
we can overflow the buffer, and eventually execute code.  There are a total of
11 overflows that are exploitable to execute arbitrary code.

++++++++++++++++++++++++++++++++++++++++++++

Details:

01]readbmp.c:180:  if ((work_bmap = *bmap = 
                            calloc (w * (h + 2) * bytepp,1)) == NULL)

02]readgif.c:498:  if((im->image=(byte *)malloc(width*height))==NULL)

03]readgif.c:606:if((*theimageptr=
                        (byte *)malloc(ginfo->width*ginfo->height))==NULL)

04]readmrf.c:107:   (image=calloc(w64*h64*64*64,1))==NULL)

05]readpcx.c:130:if((*bmap=malloc(w*(h+2)*bytepp))==NULL)

06]readpng.c:225:theimage=(byte *)malloc(pixelsize*width*(height+2));

07]readpnm.c:147:if((*bmap=malloc(w*(h+2)*bytepp))==NULL)

08]readprf.c:205:if((*bmap=work_bmap=malloc(width*(height+2)*planes))==NULL)

09]readtiff.c:89:if((image=*bmap=work_bmap=
                        malloc(numpix*sizeof(uint32)+width*3*2))==NULL)

10]readxpm.c:183:if((colchars=malloc(ncols*sizeof(struct colchars_tag)))==NULL)

11]readxpm.c:372:if((*bmap=malloc(w*(h+2)*bytepp))==NULL)

++++++++++++++++++++++++++++++++++++++++++++

Exploits:

There is a C file for each hole above.  The exploit for the first xpm hole,
#10, demonstrates code execution,  the rest just crash zgv.  The only one I
couldn't get working is the second gif hole, #3 from above.  That is in the
file ximage_other_gif.c.  However, all are suitable for code execution with
some work.  I just didn't have the time.

++++++++++++++++++++++++++++++++++++++++++++

Note:

There was also a hole in:

01]readpcd.c:42:if((*bmap=malloc(w*(h+3-*output_type)*(*output_type)))==NULL)

I couldn't find the PCD file format anywhere for free on the web, and didn't
pursue this further.  I didn't see anything that would make it not exploitable
though, so it looks valid to me.

++++++++++++++++++++++++++++++++++++++++++++

Vendor:

Was not contacted.

++++++++++++++++++++++++++++++++++++++++++++

-- 
-sean

--Multipart=_Mon__25_Oct_2004_21_07_17_-0400_OWkuQHb76W=99N4E
Content-Type: application/octet-stream;
 name="ximage_zgv.tar.gz"
Content-Disposition: attachment;
 filename="ximage_zgv.tar.gz"
Content-Transfer-Encoding: base64
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--Multipart=_Mon__25_Oct_2004_21_07_17_-0400_OWkuQHb76W=99N4E--

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, SecurityGlobal.net LLC