Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.870883
Kategorie:Red Hat Local Security Checks
Titel:RedHat Update for gtk2 RHSA-2013:0135-01
Zusammenfassung:The remote host is missing an update for the 'gtk2'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'gtk2'
package(s) announced via the referenced advisory.

Vulnerability Insight:
GIMP Toolkit (GTK+) is a multi-platform toolkit for creating graphical user
interfaces.

An integer overflow flaw was found in the X BitMap (XBM) image file loader
in GTK+. A remote attacker could provide a specially-crafted XBM image file
that, when opened in an application linked against GTK+ (such as Nautilus),
would cause the application to crash. (CVE-2012-2370)

This update also fixes the following bugs:

* Due to a bug in the Input Method GTK+ module, the usage of the Taiwanese
Big5 (zh_TW.Big-5) locale led to the unexpected termination of certain
applications, such as the GDM greeter. The bug has been fixed, and the
Taiwanese locale no longer causes applications to terminate unexpectedly.
(BZ#487630)

* When a file was initially selected after the GTK+ file chooser dialog was
opened and the Location field was visible, pressing the Enter key did not
open the file. With this update, the initially selected file is opened
regardless of the visibility of the Location field. (BZ#518483)

* When a file was initially selected after the GTK+ file chooser dialog was
opened and the Location field was visible, pressing the Enter key did not
change into the directory. With this update, the dialog changes into the
initially selected directory regardless of the visibility of the Location
field. (BZ#523657)

Description truncated, please see the referenced URL(s) for more information.

Affected Software/OS:
gtk2 on Red Hat Enterprise Linux (v. 5 server)

Solution:
Please Install the Updated Packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-2370
BugTraq ID: 53548
http://www.securityfocus.com/bid/53548
http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml
http://git.gnome.org/browse/gdk-pixbuf/
https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150
http://www.openwall.com/lists/oss-security/2012/05/15/8
http://www.openwall.com/lists/oss-security/2012/05/15/9
RedHat Security Advisories: RHSA-2013:0135
http://rhn.redhat.com/errata/RHSA-2013-0135.html
http://secunia.com/advisories/49125
http://secunia.com/advisories/49715
XForce ISS Database: gdkpixbuf-readbitmapfiledata-bo(75578)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75578
CopyrightCopyright (c) 2013 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.