|
Gentoo: gtksee Buffer overflow vulnerability |
|
|
|
Posted by LinuxSecurity.com Team
|
Attackers can use carefully crafted png pictures to execute arbitrarycommands using a buffer overflow in when viewed in gtksee.
- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200307-05
- - ---------------------------------------------------------------------
PACKAGE : gtksee
SUMMARY : buffer overflow
DATE : 2003-07-11 14:44 UTC
EXPLOIT : local
VERSIONS AFFECTED : =gtksee-0.5.2
CVE : CAN-2003-0444
- - ---------------------------------------------------------------------
Attackers can use carefully crafted png pictures to execute arbitrary
commands using a buffer overflow in when viewed in gtksee.
SOLUTION
It is recommended that all Gentoo Linux users who are running
media-gfx/gtksee upgrade to gtksee-0.5.2 as follows
emerge sync
emerge gtksee
emerge clean
- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://dev.gentoo.org/~aliz
- - ---------------------------------------------------------------------
|
