|
|
>> Fedora Security Update Fixes GIMP Multiple Client-Side Integer Overflow Vulnerabilities
|
Title : Fedora Security Update Fixes GIMP Multiple Client-Side Integer Overflow Vulnerabilities
VUPEN ID : VUPEN/ADV-2007-2524
CVE ID : GENERIC-MAP-NOMATCH
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-07-13
|
Multiple vulnerabilities have been identified in Fedora, which could be exploited by attackers to execute arbitrary code. These issues are caused by errors in GIMP. For additional information, see : VUPEN/ADV-2007-2471
Affected Products
Fedora 7
Solution
Upgrade the affected packages :
3552197773e22789c4580d1f5228a016d7403a8a gimp-libs-2.2.16-2.fc7.ppc64.rpm
1d173d4d86c5da2d632908bc6e92644c390ffece gimp-2.2.16-2.fc7.ppc64.rpm
2736333f6a1a91c12d3b8e379d3121c847b990ae gimp-debuginfo-2.2.16-2.fc7.ppc64.rpm
49a1b8fe396330335367bfa16312f82ad1442b61 gimp-devel-2.2.16-2.fc7.ppc64.rpm
6bef2a96d21cddc8c011d73c02a574f72f42c858 gimp-devel-2.2.16-2.fc7.i386.rpm
6207fe2fba495a7362ebb005d78f41ffc5de5096 gimp-2.2.16-2.fc7.i386.rpm
725c38a9171ff65fdadd6e1053b6e60c03fb6ca0 gimp-libs-2.2.16-2.fc7.i386.rpm
dfacf4dbc7db15c0ff53ce340d59ebaabf53fbb4 gimp-debuginfo-2.2.16-2.fc7.i386.rpm
64abb71f23df8d20fc466ddb4ccb2eeb9b343660 gimp-devel-2.2.16-2.fc7.x86_64.rpm
fd280b64a7bbfebeb25d10b8d7a51b2c7000f009 gimp-2.2.16-2.fc7.x86_64.rpm
2f9ac1ef72c93558019d60eb2f4ea207db48e0f7 gimp-libs-2.2.16-2.fc7.x86_64.rpm
b7a45265a84a7a8204960a78c0e44151a4a904c1 gimp-debuginfo-2.2.16-2.fc7.x86_64.rpm
0f70f6e5b851f6c156fd601ab60a5098d3f76fd2 gimp-2.2.16-2.fc7.ppc.rpm
3e24e835b2d21c4ff84646adedd0fc9d7e6e02a2 gimp-devel-2.2.16-2.fc7.ppc.rpm
176559da6a016d87477e8f4a6b415a4b1e26a676 gimp-debuginfo-2.2.16-2.fc7.ppc.rpm
b6eb2d18fa5b435af100f3863451ee036d5ccd45 gimp-libs-2.2.16-2.fc7.ppc.rpm
3374656723f96bede6c839fae679b044b8017ec5 gimp-2.2.16-2.fc7.src.rpm
References
http://www.vupen.com/english/advisories/2007/2524
https://www.redhat.com/archives/fedora-package-announce/2007-July/msg00260.html
ChangeLog
2007-07-13 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
