Ubuntu Security Notice USN-266-1
3rd April, 2006
dia vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 5.10
- Ubuntu 5.04
- Ubuntu 4.10
Details
Three buffer overflows were discovered in the Xfig file format
importer. By tricking a user into opening a specially crafted .fig
file with dia, an attacker could exploit this to execute arbitrary
code with the user's privileges.
Update instructions
The problem can be corrected by updating your system to the following package version:
- Ubuntu 5.10:
- dia-gnome
- dia
- dia-libs
- Ubuntu 5.04:
- dia-gnome
- dia
- dia-libs
- Ubuntu 4.10:
- dia-gnome
- dia
- dia-libs
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
None