Revision Date: | 2004-09-15 | Version: | 502 |
Title: | RHSA-2004:465: imlib security update (Important) |
Description: | Imlib is an image loading and rendering library.
Several heap overflow flaws were found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it could cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0817 to this issue.
Users of imlib should update to this updated package which contains backported patches and is not vulnerable to this issue.
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | CVE-2004-0817 RHSA-2004:465-01
|
Platform(s): | Red Hat Enterprise Linux 3
| Product(s): | |
Definition Synopsis |
Red Hat Enterprise Linux 3 is installed AND Package Information
imlib-cfgeditor is earlier than 1:1.9.13-13.3
AND imlib-cfgeditor is signed with Red Hat master key
OR
imlib is earlier than 1:1.9.13-13.3
AND imlib is signed with Red Hat master key
OR
imlib-devel is earlier than 1:1.9.13-13.3
AND imlib-devel is signed with Red Hat master key
|