|
|
>> Mandriva Security Update Fixes Wine Arbitrary Code Execution Vulnerability
|
Title : Mandriva Security Update Fixes Wine Arbitrary Code Execution Vulnerability
VUPEN ID : VUPEN/ADV-2006-0225
CVE ID : CVE-2006-0106
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-01-16
|
Mandriva has released updated packages to correct a vulnerability identified in Wine. This flaw is due to an error in the "dlls/gdi/metafile.c" file when rendering Windows Metafile (WMF) images containing specially crafted SetAbortProc "Escape" records, which could be exploited by attackers to compromise an affected system by convincing a user to open a malicious WMF file via a vulnerable application. For additional information, see : VUPEN/ADV-2006-0098
Affected Products
Mandriva Linux 2006.0
Corporate 3.0
Solution
Upgrade the affected packages :
Mandriva Linux 2006.0:
d4f3baabbba81f1bad315bc79dad7e9c 2006.0/RPMS/libwine1-20050725-6.1.20060mdk.i586.rpm
fc810c3d98a537fce73977c5aa6912ea 2006.0/RPMS/libwine1-capi-20050725-6.1.20060mdk.i586.rpm
5663e266c34853af09f421897bd778c7 2006.0/RPMS/libwine1-devel-20050725-6.1.20060mdk.i586.rpm
27052e10ffe276948b7902d9a72aba9a 2006.0/RPMS/libwine1-twain-20050725-6.1.20060mdk.i586.rpm
02f66be98c0d8bde52bcfeb4e4a4ce2d 2006.0/RPMS/wine-20050725-6.1.20060mdk.i586.rpm
37780f9798d8da0c4de0a996f65b41b9 2006.0/SRPMS/wine-20050725-6.1.20060mdk.src.rpm
Corporate 3.0:
a22d48d27955a0b5c8cf7c872a5332ea corporate/3.0/RPMS/libwine1-20040213-3.1.C30mdk.i586.rpm
b0214de7c0416e65330c2aa07c7de5ad corporate/3.0/RPMS/libwine1-capi-20040213-3.1.C30mdk.i586.rpm
d9abcd416d2bb0f3d1b892f3c58d3432 corporate/3.0/RPMS/libwine1-devel-20040213-3.1.C30mdk.i586.rpm
6495fbac8ea70deab3b8401b3d83f12d corporate/3.0/RPMS/libwine1-twain-20040213-3.1.C30mdk.i586.rpm
5659cd4b240da12ed15644da93c81723 corporate/3.0/RPMS/wine-20040213-3.1.C30mdk.i586.rpm
c32125932c612311afa5c930af3869ab corporate/3.0/RPMS/wine-utils-20040213-3.1.C30mdk.i586.rpm
4611ae314fd47a15f540e1d15021e79d corporate/3.0/SRPMS/wine-20040213-3.1.C30mdk.src.rpm
References
http://www.vupen.com/english/advisories/2006/0225
http://www.frsirt.com/english/reference/4565
ChangeLog
2006-01-16 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
