Test ID:	1.3.6.1.4.1.25623.1.0.55866
Category:	Fedora Local Security Checks
Title:	Fedora Core 4 FEDORA-2005-1085 (gdk-pixbuf)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to gdk-pixbuf announced via advisory FEDORA-2005-1085. Update Information: The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was found in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-3186 to this issue. Ludwig Nussel discovered an integer overflow bug in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execute arbitrary code or crash when the file was opened by a victim. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2976 to this issue. Ludwig Nussel also discovered an infinite-loop denial of service bug in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to stop responding when the file was opened by a victim. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2975 to this issue. Users of gdk-pixbuf are advised to upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues. * Mon Oct 31 2005 Matthias Clasen - 1:0.22.0-18.fc4.2 - Prevent another integer overflow in the xpm loader (#171901, CVE-2005-2976) - Prevent an infinite loop in the xpm loader (#171901, CVE-2005-2976) * Wed Oct 19 2005 Matthias Clasen - 1:0.22.0-18.fc4.1 - Prevent an integer overflow in the xpm loader (#171073, CVE-2005-3186) Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2005-1085 Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3186 BugTraq ID: 15435 http://www.securityfocus.com/bid/15435 Debian Security Information: DSA-911 (Google Search) http://www.debian.org/security/2005/dsa-911 Debian Security Information: DSA-913 (Google Search) http://www.debian.org/security/2005/dsa-913 http://www.securityfocus.com/archive/1/428052/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9503 http://www.redhat.com/support/errata/RHSA-2005-810.html http://www.redhat.com/support/errata/RHSA-2005-811.html SCO Security Bulletin: SCOSA-2006.8 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt http://securitytracker.com/id?1015216 http://secunia.com/advisories/17522 http://secunia.com/advisories/17538 http://secunia.com/advisories/17562 http://secunia.com/advisories/17588 http://secunia.com/advisories/17591 http://secunia.com/advisories/17592 http://secunia.com/advisories/17594 http://secunia.com/advisories/17615 http://secunia.com/advisories/17657 http://secunia.com/advisories/17710 http://secunia.com/advisories/17770 http://secunia.com/advisories/17791 http://secunia.com/advisories/18509 http://securityreason.com/securityalert/188 SuSE Security Announcement: SUSE-SA:2005:065 (Google Search) http://www.novell.com/linux/security/advisories/2005_65_gtk2.html http://www.ubuntu.com/usn/usn-216-1 http://www.vupen.com/english/advisories/2005/2433 Common Vulnerability Exposure (CVE) ID: CVE-2005-2976 BugTraq ID: 15428 http://www.securityfocus.com/bid/15428 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11370 Common Vulnerability Exposure (CVE) ID: CVE-2005-2975 BugTraq ID: 15429 http://www.securityfocus.com/bid/15429 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.