Test ID:	1.3.6.1.4.1.25623.1.0.50566
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2004:085 (qt3)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to qt3 announced via advisory MDKSA-2004:085. Chris Evans discovered a heap-based overflow in the QT library when handling 8-bit RLE encoded BMP files. This vulnerability could allow for the compromise of the account used to view or browse malicious BMP files. On subsequent investigation, it was also found that the handlers for XPM, GIF, and JPEG image types were also faulty. These problems affect all applications that use QT to handle image files, such as QT-based image viewers, the Konqueror web browser, and others. The updated packages have been patched to correct these problems. Affected versions: 10.0, 9.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2004:085 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0691 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0692 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0693 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0691 Bugtraq: 20040818 CESA-2004-004: qt (Google Search) http://marc.info/?l=bugtraq&m=109295309008309&w=2 Debian Security Information: DSA-542 (Google Search) http://www.debian.org/security/2004/dsa-542 http://security.gentoo.org/glsa/glsa-200408-20.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485 http://www.redhat.com/support/errata/RHSA-2004-414.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 SuSE Security Announcement: SUSE-SA:2004:027 (Google Search) http://www.novell.com/linux/security/advisories/2004_27_qt3.html XForce ISS Database: qt-bmp-bo(17040) https://exchange.xforce.ibmcloud.com/vulnerabilities/17040 Common Vulnerability Exposure (CVE) ID: CVE-2004-0692 http://marc.info/?l=bugtraq&m=110979666528890&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327 XForce ISS Database: qt-xpm-dos(17041) https://exchange.xforce.ibmcloud.com/vulnerabilities/17041 Common Vulnerability Exposure (CVE) ID: CVE-2004-0693 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883 XForce ISS Database: qt-gif-dos(17042) https://exchange.xforce.ibmcloud.com/vulnerabilities/17042
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.