| |||||||||||||
| Test ID: | 55869 |
| Category: | Fedora Local Security Checks |
| Title: | Fedora Core 4 FEDORA-2005-1088 (gtk2) |
| Summary: | Fedora Core 4 FEDORA-2005-1088 (gtk2) |
| Description: | The remote host is missing an update to gtk2 announced via advisory FEDORA-2005-1088. Update Information: The gtk2 package contains the GIMP ToolKit (GTK+), a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-3186 to this issue. Ludwig Nussel discovered an infinite-loop denial of service bug in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 to stop responding when the file was opened by a victim. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2975 to this issue. Users of gtk2 are advised to upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues. * Mon Oct 31 2005 Matthias Clasen - 2.6.10-2.fc4.4 - Prevent an infinite loop in the xpm loader (#171905, CVE-2005-2975) * Wed Oct 19 2005 Matthias Clasen - 2.6.10-2.fc4.2 - Prevent an integer overflow in the xpm loader (#171075, CVE-2005-3186) Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2005-1088 Risk factor : High |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2005-3186 http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities Debian Security Information: DSA-913 (Google Search) http://www.debian.org/security/2005/dsa-913 Debian Security Information: DSA-911 (Google Search) http://www.debian.org/security/2005/dsa-911 http://www.securityfocus.com/archive/1/archive/1/428052/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 http://www.redhat.com/support/errata/RHSA-2005-810.html http://www.redhat.com/support/errata/RHSA-2005-811.html SCO Security Bulletin: SCOSA-2006.8 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt SuSE Security Announcement: SUSE-SA:2005:065 (Google Search) http://www.novell.com/linux/security/advisories/2005_65_gtk2.html http://www.ubuntu.com/usn/usn-216-1 BugTraq ID: 15435 http://www.securityfocus.com/bid/15435 http://www.vupen.com/english/advisories/2005/2433 http://securitytracker.com/id?1015216 http://secunia.com/advisories/17522 http://secunia.com/advisories/17594 http://secunia.com/advisories/17710 http://secunia.com/advisories/17538 http://secunia.com/advisories/17562 http://secunia.com/advisories/17588 http://secunia.com/advisories/17591 http://secunia.com/advisories/17592 http://secunia.com/advisories/17615 http://secunia.com/advisories/17657 http://secunia.com/advisories/17770 http://secunia.com/advisories/17791 http://secunia.com/advisories/18509 http://securityreason.com/securityalert/188 Common Vulnerability Exposure (CVE) ID: CVE-2005-2975 BugTraq ID: 15429 http://www.securityfocus.com/bid/15429 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| This is only one of 24808 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |
|
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe | Whois
© 1998-2010 E-Soft Inc. All rights reserved.