GdkPixbuf未明位图处理拒绝服务漏洞

漏洞信息详情

GdkPixbuf未明位图处理拒绝服务漏洞

• CNNVD编号：CNNVD-200404-046
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0111
  
• 漏洞类型：
  
  
  未知
  
• 发布时间：
  
  2004-04-15
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-13
  
• 厂        商：
  
  gnome
• 漏洞来源：
  Discovery of this …

gdk-pixbuf 0.20之前版本存在漏洞。攻击者可以通过畸形的位图(BMP)文件导致服务拒绝（崩溃）。

Red Hat has released an advisory RHSA-2004:103-05 and fixes to address this issue in Red Hat enterprise products. Customers who are subscribed to the Red Hat Network may employ the up2date utility to retrieve appropriate fixes, further information can be found in the referenced advisory.
Red Hat has released an advisory RHSA-2004:102-01 and fixes to address this issue in various Red Hat Linux operating systems. Please see the referenced advisory for more information.
Mandrake has released an advisory MDKSA-2004:020 to address this issue in corporate products. Please see the referenced advisory for more information.
Debian has released advisory DSA 464-1 to address this issue. Please see the attached advisory for details on obtaining and applying fixes.
SGI ProPack Patch 10062 is available. Please see advisory 20040303-01-U for further details.
RedHat Fedora Legacy has released advisory FLSA:2005 to address this issue for RedHat Linux 7.3 and 9. Please see the referenced advisory for details on obtaining and applying fixes.
RedHat gdk-pixbuf-gnome-0.18.0-7.i386.rpm

• Red Hat gdk-pixbuf-gnome-0.22.0-6.1.0.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/gdk-pixbuf-gnome-0.22.0-6.1.0.i3
  86.rpm

RedHat gdk-pixbuf-0.18.0-7.i386.rpm

• Red Hat gdk-pixbuf-0.22.0-6.1.0.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/gdk-pixbuf-0.22.0-6.1.0.i386.rpm
  

RedHat gdk-pixbuf-devel-0.18.0-7.i386.rpm

• Red Hat gdk-pixbuf-devel-0.22.0-6.1.0.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/gdk-pixbuf-devel-0.22.0-6.1.0.i3
  86.rpm

GNOME GdkPixbuf 0.17

• Debian libgdk-pixbuf-dev_0.17.0-2woody1_alpha.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_alpha.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_arm.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_arm.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_hppa.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_hppa.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_i386.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_i386.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_ia64.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_ia64.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_m68k.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_m68k.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_mips.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_mips.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_mipsel.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_mipsel.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_powerpc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_powerpc.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_s390.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_s390.deb
• Debian libgdk-pixbuf-dev_0.17.0-2woody1_sparc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-dev_0.17.0-2woody1_sparc.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_alpha.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_alpha.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_arm.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_arm.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_hppa.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_hppa.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_i386.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_i386.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_ia64.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_ia64.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_m68k.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_m68k.deb
• Debian libgdk-pixbuf-gnome-dev_0.17.0-2woody1_mips.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gdk-pixbuf/libgdk-pixbu
  f-gnome-dev_0.17.0-2woody1_mips.deb
• Debian libgdk-pixbuf-gn

来源: BID
名称: 9842
链接:http://www.securityfocus.com/bid/9842

来源: REDHAT
名称: RHSA-2004:103
链接:http://www.redhat.com/support/errata/RHSA-2004-103.html

来源: FEDORA
名称: FLSA:2005
链接:https://bugzilla.fedora.us/show_bug.cgi?id=2005

来源: XF
名称: gdk-pixbuf-bitmap-dos(15426)
链接:http://xforce.iss.net/xforce/xfdb/15426

来源: REDHAT
名称: RHSA-2004:102
链接:http://www.redhat.com/support/errata/RHSA-2004-102.html

来源: MANDRAKE
名称: MDKSA-2004:020
链接:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:020

来源: DEBIAN
名称: DSA-464
链接:http://www.debian.org/security/2004/dsa-464

来源: US Government Resource: oval:org.mitre.oval:def:846
名称: oval:org.mitre.oval:def:846
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:846

来源: US Government Resource: oval:org.mitre.oval:def:845
名称: oval:org.mitre.oval:def:845
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:845