app-office/dia-0.98_pre20250913 — Security Advisories

▸ GLSA 200606-03 Dia: Format string vulnerabilities this version unaffected normal remote 2006-06-07

Format string vulnerabilities in Dia may lead to the execution of arbitrary code.

Announced: 2006-06-07
Revised: 2006-06-07
Access: remote
Bugs: #133699
Advisory: https://security.gentoo.org/glsa/200606-03

Affected packages

Package	Arch	Vulnerable	Unaffected
app-office/dia	*	< 0.95.1	>= 0.95.1

Background

Dia is a GTK+ based diagram creation program.

Description

KaDaL-X discovered a format string error within the handling of filenames. Hans de Goede also discovered several other format string errors in the processing of dia files.

Impact

By enticing a user to open a specially crafted file, a remote attacker could exploit these vulnerabilities to execute arbitrary code with the rights of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

All Dia users should upgrade to the latest available version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/dia-0.95.1"

References

▸ GLSA 200604-14 Dia: Arbitrary code execution through XFig import this version unaffected normal remote 2006-04-23

Buffer overflows in Dia's XFig import could allow remote attackers to execute arbitrary code.

Announced: 2006-04-23
Revised: 2006-04-23
Access: remote
Bugs: #128107
Advisory: https://security.gentoo.org/glsa/200604-14

Affected packages

Package	Arch	Vulnerable	Unaffected
app-office/dia	*	< 0.94-r5	>= 0.94-r5

Background

Dia is a GTK+ based diagram creation program.

Description

infamous41md discovered multiple buffer overflows in Dia's XFig file import plugin.

Impact

By enticing a user to import a specially crafted XFig file into Dia, an attacker could exploit this issue to execute arbitrary code with the rights of the user running Dia.

Workaround

There is no known workaround at this time.

Resolution

All Dia users should upgrade to the latest available version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/dia-0.94-r5"

References

CVE-2006-1550

▸ GLSA 200510-06 Dia: Arbitrary code execution through SVG import this version unaffected normal remote 2005-10-06

Improperly sanitised data in Dia allows remote attackers to execute arbitrary code.

Announced: 2005-10-06
Revised: 2005-10-06
Access: remote
Bugs: #107916
Advisory: https://security.gentoo.org/glsa/200510-06

Affected packages

Package	Arch	Vulnerable	Unaffected
app-office/dia	*	< 0.94-r3	>= 0.94-r3

Background

Dia is a gtk+ based diagram creation program released under the GPL license.

Description

Joxean Koret discovered that the SVG import plugin in Dia fails to properly sanitise data read from an SVG file.

Impact

An attacker could create a specially crafted SVG file, which, when imported into Dia, could lead to the execution of arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All Dia users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/dia-0.94-r3"

References

CAN-2005-2966