Bug#303141: CAN-2005-0891: Palette-less BMPs can cause double free() DoS

[Moritz Muehlenhoff]

Package: gtk+2.0
Severity: important
Tags: security

[ Dear security team: You can test whether Woody is affected by loading this
  image into gqview; if it causes a lockup it's affected as well:
  http://bugzilla.gnome.org/attachment.cgi?id=39270&action=view ]

Attackers can cause DoS against applications using GTK through BMP images
without palette information, which will lead into a double free().

See http://bugzilla.gnome.org/show_bug.cgi?id=171707
for full details and a patch.

Please refer to CAN-2005-0891 when fixing this.

Cheers,
        Moritz

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15)