Nixpkgs Security Tracker

Login with GitHub

Suggestions search

Untriaged

Filter by:

With package: netsurf.libnsbmp

Found 3 matching suggestions

View:

Compact

Detailed

Permalink CVE-2015-7507

created 1 month ago

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a …

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.

References

http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_transferred x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_transferred x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_transferred x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_transferred x_refsource_MISC

Affected products

Libnsbmp

==0.1.2

Matching in nixpkgs

pkgs.libnsbmp

BMP Decoder for netsurf browser

nixos-unstable 0.1.7
- nixpkgs-unstable 0.1.7
- nixos-unstable-small 0.1.7
nixos-25.11 0.1.7
- nixos-25.11-small 0.1.7
- nixpkgs-25.11-darwin 0.1.7

pkgs.netsurf.libnsbmp

BMP Decoder for netsurf browser

Package maintainers

@fgaz Francesco Gazzetta <fgaz@fgaz.me>

Permalink CVE-2015-7508

created 1 month ago

Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in …

Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file.

References

http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_transferred x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_transferred x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_transferred x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_transferred x_refsource_MISC

Affected products

Libnsbmp

==0.1.2

Matching in nixpkgs

pkgs.libnsbmp

BMP Decoder for netsurf browser

nixos-unstable 0.1.7
- nixpkgs-unstable 0.1.7
- nixos-unstable-small 0.1.7
nixos-25.11 0.1.7
- nixos-25.11-small 0.1.7
- nixpkgs-25.11-darwin 0.1.7

pkgs.netsurf.libnsbmp

BMP Decoder for netsurf browser

Package maintainers

@fgaz Francesco Gazzetta <fgaz@fgaz.me>

Permalink CVE-2012-0844

created 1 month ago

Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable …

Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.

References

https://access.redhat.com/security/cve/cve-2012-0844 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/02/11/3 x_refsource_MISC
51981 vdb-entry x_refsource_BID
https://security-tracker.debian.org/tracker/CVE-2012-0844 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-0844 x_transferred x_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-0844 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/02/11/3 x_transferred x_refsource_MISC
51981 x_transferred vdb-entry x_refsource_BID
https://security-tracker.debian.org/tracker/CVE-2012-0844 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-0844 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/02/11/3 x_refsource_MISC
51981 vdb-entry x_refsource_BID
http://www.openwall.com/lists/oss-security/2012/02/11/3 x_transferred x_refsource_MISC
51981 x_transferred vdb-entry x_refsource_BID
https://security-tracker.debian.org/tracker/CVE-2012-0844 x_transferred x_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-0844 x_transferred x_refsource_MISC

Affected products

netsurf

==through 2.8

Matching in nixpkgs

pkgs.netsurf.libcss

Cascading Style Sheets library for netsurf browser

pkgs.netsurf.libdom

Document Object Model library for netsurf browser

pkgs.netsurf-browser

Free, open source, small web browser

nixos-unstable 3.11
- nixpkgs-unstable 3.11
- nixos-unstable-small 3.11
nixos-25.11 3.11
- nixos-25.11-small 3.11
- nixpkgs-25.11-darwin 3.11

pkgs.netsurf.libnsfb

Netsurf framebuffer abstraction library

pkgs.netsurf.libnsbmp

BMP Decoder for netsurf browser

pkgs.netsurf.libnsgif

GIF Decoder for netsurf browser

pkgs.netsurf.libnslog

NetSurf Parametric Logging Library

pkgs.netsurf.libnspsl

NetSurf Public Suffix List - Handling library

pkgs.netsurf.libhubbub

HTML5 parser library for netsurf browser

pkgs.netsurf.nsgenbind

Generator for JavaScript bindings for netsurf browser

pkgs.netsurf.libnsutils

Generalised utility library for netsurf browser

pkgs.netsurf.libsvgtiny

NetSurf SVG decoder

pkgs.netsurf-buildsystem

NetSurf browser shared build system

nixos-unstable 1.10
- nixpkgs-unstable 1.10
- nixos-unstable-small 1.10
nixos-25.11 1.10
- nixos-25.11-small 1.10
- nixpkgs-25.11-darwin 1.10

pkgs.netsurf.buildsystem

NetSurf browser shared build system

pkgs.netsurf.libutf8proc

UTF8 Processing library for netsurf browser

pkgs.netsurf.libwapcaplet

String internment library for netsurf browser

pkgs.netsurf.libparserutils

Parser building library for netsurf browser

Package maintainers

@fgaz Francesco Gazzetta <fgaz@fgaz.me>

1