Guess Which Vulnerabilities XEmacs Has In Store For You?

Good day to all you eager computer security readers. My name is Lauren Gerber and I am here to present you with some information with regards to a new vulnerability. This time I will be talking about vulnerabilities which have been discovered in XEmacs and could prove disastrous if they are not effectively dealt with.

The following vulnerabilities have been discovered in XEmacs:

1. There is an integer overflow that exists in the "jpeg_instantiate ()" function in glyphs-eimage.c. If this is exploited it will result in a heap based buffer overflow via a manipulated JPEG file.
2. There is an integer overflow error within the "png_instantiate()" function in glyphs-eimage.c. If this is exploited it will result in a heap based buffer overflow via a manipulated PNG file.
3. There is an overflow error within the "tiff_instantiate()" function in glyphs-eimage.c. If this is exploited it will result in a heap based buffer overflow via a manipulated TIFF file.

Let me explain to you exactly what XEmacs is. XEmacs is an extremely customizable text editor and development system, which is open source. XEmacs has a fantastic active development community, which runs on Linux, Unix as well as Windows 95. Some of the files of Windows 95 may include but are by no means limited to the following: MOS105.INF, mos.inf, MONSTER.BAT, modini.exe, MODERNE.DLL as well as modemwav.inf.

If these vulnerabilities are exploited by malicious characters it could potentially result in chosen users' systems being compromised. If these vulnerabilities are exploited successfully, it will most probably result in the execution of arbitrary code and unauthorized system access taking place.

It is unfortunate for me to have to tell you, that these vulnerabilities have been rated as moderately critical. These vulnerabilities have been confirmed in version 21.4.22 for Windows. It is vital for users to know that other versions may also affected. One of the solutions that exit at this current point in time is for users not to process any untrusted images with XEmacs under any circumstances.