Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.870883
Category:Red Hat Local Security Checks
Title:RedHat Update for gtk2 RHSA-2013:0135-01
Summary:The remote host is missing an update for the 'gtk2'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'gtk2'
package(s) announced via the referenced advisory.

Vulnerability Insight:
GIMP Toolkit (GTK+) is a multi-platform toolkit for creating graphical user
interfaces.

An integer overflow flaw was found in the X BitMap (XBM) image file loader
in GTK+. A remote attacker could provide a specially-crafted XBM image file
that, when opened in an application linked against GTK+ (such as Nautilus),
would cause the application to crash. (CVE-2012-2370)

This update also fixes the following bugs:

* Due to a bug in the Input Method GTK+ module, the usage of the Taiwanese
Big5 (zh_TW.Big-5) locale led to the unexpected termination of certain
applications, such as the GDM greeter. The bug has been fixed, and the
Taiwanese locale no longer causes applications to terminate unexpectedly.
(BZ#487630)

* When a file was initially selected after the GTK+ file chooser dialog was
opened and the Location field was visible, pressing the Enter key did not
open the file. With this update, the initially selected file is opened
regardless of the visibility of the Location field. (BZ#518483)

* When a file was initially selected after the GTK+ file chooser dialog was
opened and the Location field was visible, pressing the Enter key did not
change into the directory. With this update, the dialog changes into the
initially selected directory regardless of the visibility of the Location
field. (BZ#523657)

Description truncated, please see the referenced URL(s) for more information.

Affected Software/OS:
gtk2 on Red Hat Enterprise Linux (v. 5 server)

Solution:
Please Install the Updated Packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2012-2370
BugTraq ID: 53548
http://www.securityfocus.com/bid/53548
http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml
http://git.gnome.org/browse/gdk-pixbuf/
https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150
http://www.openwall.com/lists/oss-security/2012/05/15/8
http://www.openwall.com/lists/oss-security/2012/05/15/9
RedHat Security Advisories: RHSA-2013:0135
http://rhn.redhat.com/errata/RHSA-2013-0135.html
http://secunia.com/advisories/49125
http://secunia.com/advisories/49715
XForce ISS Database: gdkpixbuf-readbitmapfiledata-bo(75578)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75578
CopyrightCopyright (c) 2013 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.