1 2 3 4 5 6

Vulnerabilidades rss pdf

Coordinación de Seguridad de la Información - UNAM-CERT -- DGTIC-UNAM

Vulnerabilidad de Seguridad UNAM-CERT-2005-551 Mandriva liberó una actualización para gdk-pixbuf.

Mandriva liberó una actualización para gdk-pixbuf. Esta repara varias vulnerabilidades que pueden explotarse para ocasionar una negación de servicio (DoS), y posiblemente comprometer el sistema de un usuario o un sistema vulnerable.

  • Fecha de Liberación: 21-Nov-2005
  • Ultima Revisión: 22-Nov-2005
  • Fuente:

    Mandriva Advisories
    MDKSA-2005:214

  • CVE ID: CAN-2004-0753 CAN-2004-0782 CAN-2004-0783 CAN-2004-0788 CAN-2005-0891 CAN-2005-2975 CAN-2005-2976 CAN-2005-3186
  • Riesgo Altamente crítico
  • Problema de Vulnerabilidad Remoto
  • Tipo de Vulnerabilidad Múltiples vulnerabilidades

Sistemas Afectados

Mandrake CS2.1 gdk-pixbuf 0.18.0-3.3
Mandrake CS3.0 gdk-pixbuf 0.22.0-2.5
Mandrake LE2005 gdk-pixbuf 0.22.0-2.5
Mandrake LE2006 gdk-pixbuf 0.22.0-2.5
  1. Descripción

    Mandriva liberó una actualización para gdk-pixbuf. Esta repara varias vulnerabilidades que pueden explotarse por personas maliciosas para ocasionar una negación de servicio (DoS), y posiblemente comprometer el sistema de un usuario o un sistema vulnerable.

      Un desbordamiento de memoria en la biblioteca gráfica gdk-pixbuf para XPM puede permitir la ejecución de código arbitrario. Un atacante puede explotarlo al suministrar una imagén XPM maliciosa. Ludwing Nussel encontró un desbordamiento de variable en la forma que gdk-pixbuf procesa imagenes XPM. Un atacante podria crear un archivo XPM malicioso que le permita ejecutar código arbitrario o tirar la aplicación cuando una victima lo abra, también encontró un ciclo infinito que puede utilizarse para ocasionar una negación de servicio.

  2. Impacto

  3. Solución

    Aplicar los paquetes actualizados.

    Corporate Server 2.1

     eb77d6aea246fd1fce30cf70983eef97 corporate/2.1/RPMS/gdk-pixbuf-loaders-0.18.0-3.3.C21mdk.i586.rpm
     503674f8eedc566ced07ed37c7b36af1 corporate/2.1/RPMS/gtk+2.0-2.0.6-8.3.C21mdk.i586.rpm
     e20d204c0af2e94664dcf19461a7078b corporate/2.1/RPMS/libgdk_pixbuf2.0_0-2.0.6-8.3.C21mdk.i586.rpm
     6cb3a7006878c1ec8058036a97e4dc5f corporate/2.1/RPMS/libgdk_pixbuf2.0_0-devel-2.0.6-8.3.C21mdk.i586.rpm
     be5904d7656771b395fdd62a55007860 corporate/2.1/RPMS/libgdk-pixbuf2-0.18.0-3.3.C21mdk.i586.rpm
     8b972da767957bbab46a014dcdf81af6 corporate/2.1/RPMS/libgdk-pixbuf2-devel-0.18.0-3.3.C21mdk.i586.rpm
     ca9b5e51db5fc47eb34239a532b5dcc4 corporate/2.1/RPMS/libgdk-pixbuf-gnomecanvas1-0.18.0-3.3.C21mdk.i586.rpm
     c6c3304b330263ca6fce717ff53607e2 corporate/2.1/RPMS/libgdk-pixbuf-xlib2-0.18.0-3.3.C21mdk.i586.rpm
     daa31d833094db844bdeb42583d0057f corporate/2.1/RPMS/libgtk+2.0_0-2.0.6-8.3.C21mdk.i586.rpm
     e48e36493f66af8c70088f363f8f28c7 corporate/2.1/RPMS/libgtk+2.0_0-devel-2.0.6-8.3.C21mdk.i586.rpm
     cfff01a1e83140d221a5103bcb4f4859 corporate/2.1/RPMS/libgtk+-linuxfb-2.0_0-2.0.6-8.3.C21mdk.i586.rpm
     abd28ee54616e3e0aac2cb99a47a64cf corporate/2.1/RPMS/libgtk+-linuxfb-2.0_0-devel-2.0.6-8.3.C21mdk.i586.rpm
     2a4ac85ef70c4727452f0d0b2a2887df corporate/2.1/RPMS/libgtk+-x11-2.0_0-2.0.6-8.3.C21mdk.i586.rpm
     8f2c41c1a3d7c29680d9dece02259268 corporate/2.1/RPMS/libgtk+-x11-2.0_0-devel-2.0.6-8.3.C21mdk.i586.rpm
     56d389005198b6d590e677c65ddf3fa8 corporate/2.1/SRPMS/gdk-pixbuf-0.18.0-3.3.C21mdk.src.rpm
     c0d4bb29fe970d14be372829fa8bf2f2 corporate/2.1/SRPMS/gtk+2.0-2.0.6-8.3.C21mdk.src.rpm
    

    Corporate Server 2.1/X86_64

     0ddfe5a3fde25c5d7c2ba3b03783098a x86_64/corporate/2.1/RPMS/gdk-pixbuf-loaders-0.18.0-3.3.C21mdk.x86_64.rpm
     4ea13c8f5452e16d15d21d82212b985c x86_64/corporate/2.1/RPMS/gtk+2.0-2.0.6-8.3.C21mdk.x86_64.rpm
     4bc150dce20f085232af78f7f3fb00e7 x86_64/corporate/2.1/RPMS/libgdk_pixbuf2.0_0-2.0.6-8.3.C21mdk.x86_64.rpm
     7d3a41da3d8fe8716278db40b87220ce x86_64/corporate/2.1/RPMS/libgdk_pixbuf2.0_0-devel-2.0.6-8.3.C21mdk.x86_64.rpm
     3a07246c63730d57377d4fac05fc7e6a x86_64/corporate/2.1/RPMS/libgdk-pixbuf2-0.18.0-3.3.C21mdk.x86_64.rpm
     316a0ca17422ca3258edebf6224a9799 x86_64/corporate/2.1/RPMS/libgdk-pixbuf2-devel-0.18.0-3.3.C21mdk.x86_64.rpm
     ee3c011a6dcf6c611190d5f303bc8383 x86_64/corporate/2.1/RPMS/libgdk-pixbuf-gnomecanvas1-0.18.0-3.3.C21mdk.x86_64.rpm
     67c47c94032b71f70a5614fb5e8f13cf x86_64/corporate/2.1/RPMS/libgdk-pixbuf-xlib2-0.18.0-3.3.C21mdk.x86_64.rpm
     dfa50729815f5fd71d0c4bace65ff883 x86_64/corporate/2.1/RPMS/libgtk+2.0_0-2.0.6-8.3.C21mdk.x86_64.rpm
     05899374ee9599ea2c3060c710baaaae x86_64/corporate/2.1/RPMS/libgtk+2.0_0-devel-2.0.6-8.3.C21mdk.x86_64.rpm
     84ea25e7270e21e6bf034ee99f607a6e x86_64/corporate/2.1/RPMS/libgtk+-linuxfb-2.0_0-2.0.6-8.3.C21mdk.x86_64.rpm
     0a5501fcb376ae58a91f93603d43c854 x86_64/corporate/2.1/RPMS/libgtk+-linuxfb-2.0_0-devel-2.0.6-8.3.C21mdk.x86_64.rpm
     8bfff43656ce1b877d6badd647e4228c x86_64/corporate/2.1/RPMS/libgtk+-x11-2.0_0-2.0.6-8.3.C21mdk.x86_64.rpm
     02c5afddb719fb1bd96069da728dee51 x86_64/corporate/2.1/RPMS/libgtk+-x11-2.0_0-devel-2.0.6-8.3.C21mdk.x86_64.rpm
     56d389005198b6d590e677c65ddf3fa8 x86_64/corporate/2.1/SRPMS/gdk-pixbuf-0.18.0-3.3.C21mdk.src.rpm
     c0d4bb29fe970d14be372829fa8bf2f2 x86_64/corporate/2.1/SRPMS/gtk+2.0-2.0.6-8.3.C21mdk.src.rpm
    

    Corporate Server 3.0

     cab845d33e298257d8d28eae7832d052 corporate/3.0/RPMS/gdk-pixbuf-loaders-0.22.0-2.5.C30mdk.i586.rpm
     1fc6c73c26ec00dc3098d6453bd0ef19 corporate/3.0/RPMS/gtk+2.0-2.2.4-10.5.C30mdk.i586.rpm
     4e79270734dfdfe712842181bb94c669 corporate/3.0/RPMS/libgdk_pixbuf2.0_0-2.2.4-10.5.C30mdk.i586.rpm
     86de0add553195511d92aff267edeec6 corporate/3.0/RPMS/libgdk_pixbuf2.0_0-devel-2.2.4-10.5.C30mdk.i586.rpm
     7055f2c41b4517335c2c4d466feef43b corporate/3.0/RPMS/libgdk-pixbuf2-0.22.0-2.5.C30mdk.i586.rpm
     f34e1a41a107ca6baaef8b215b861b04 corporate/3.0/RPMS/libgdk-pixbuf2-devel-0.22.0-2.5.C30mdk.i586.rpm
     54ca34e11e6ec1ca18fda155d64b77ca corporate/3.0/RPMS/libgdk-pixbuf-gnomecanvas1-0.22.0-2.5.C30mdk.i586.rpm
     aa6f1f400222f145d8a2478e27bffc61 corporate/3.0/RPMS/libgdk-pixbuf-xlib2-0.22.0-2.5.C30mdk.i586.rpm
     eb8625a04376a66b8e915eb1cff0bfe6 corporate/3.0/RPMS/libgtk+2.0_0-2.2.4-10.5.C30mdk.i586.rpm
     77a87c1fa116f932bed11f0359945c02 corporate/3.0/RPMS/libgtk+2.0_0-devel-2.2.4-10.5.C30mdk.i586.rpm
     fe25229ee99115542419081eef7c781a corporate/3.0/RPMS/libgtk+-linuxfb-2.0_0-2.2.4-10.5.C30mdk.i586.rpm
     441034ec5acb5457ab9a0ea7056b5bad corporate/3.0/RPMS/libgtk+-linuxfb-2.0_0-devel-2.2.4-10.5.C30mdk.i586.rpm
     3e401b38c5f473cf141c5fc644061d17 corporate/3.0/RPMS/libgtk+-x11-2.0_0-2.2.4-10.5.C30mdk.i586.rpm
     7c8aa1e0b50c0b4c810c009b55ae7199 corporate/3.0/SRPMS/gdk-pixbuf-0.22.0-2.5.C30mdk.src.rpm
     edec45f53f6c3ffee49e46734c4ef5a9 corporate/3.0/SRPMS/gtk+2.0-2.2.4-10.5.C30mdk.src.rpm
    

    Corporate Server 3.0/X86_64

     429118fdbb30b794e29afa5c464828cb x86_64/corporate/3.0/RPMS/gdk-pixbuf-loaders-0.22.0-2.5.C30mdk.x86_64.rpm
     46893bdd78f1f384f3e8ef77b03adcfd x86_64/corporate/3.0/RPMS/gtk+2.0-2.2.4-10.5.C30mdk.x86_64.rpm
     4f937b2cff87eca1a2f0ee6d40fcdef5 x86_64/corporate/3.0/RPMS/lib64gdk_pixbuf2.0_0-2.2.4-10.5.C30mdk.x86_64.rpm
     7185bee3b5b248fd1fd5cf25498b01e6 x86_64/corporate/3.0/RPMS/lib64gdk_pixbuf2.0_0-devel-2.2.4-10.5.C30mdk.x86_64.rpm
     7f60d761a707c3b6a6bedf09818a4912 x86_64/corporate/3.0/RPMS/lib64gdk-pixbuf2-0.22.0-2.5.C30mdk.x86_64.rpm
     dedc5df1fc294bda996217a031d3f486 x86_64/corporate/3.0/RPMS/lib64gdk-pixbuf2-devel-0.22.0-2.5.C30mdk.x86_64.rpm
     f64a9f5316847db31649b860c1840f05 x86_64/corporate/3.0/RPMS/lib64gdk-pixbuf-gnomecanvas1-0.22.0-2.5.C30mdk.x86_64.rpm
     01d40f81c3fcc91c82b6e19f4f7271d5 x86_64/corporate/3.0/RPMS/lib64gdk-pixbuf-xlib2-0.22.0-2.5.C30mdk.x86_64.rpm
     9315a737c3b94b8564fbb03ef49a0e3e x86_64/corporate/3.0/RPMS/lib64gtk+2.0_0-2.2.4-10.5.C30mdk.x86_64.rpm
     b7e6e3abf4687f0aed310c573e37fa24 x86_64/corporate/3.0/RPMS/lib64gtk+2.0_0-devel-2.2.4-10.5.C30mdk.x86_64.rpm
     b6a0af06cb21b4f18d1e4045646d5399 x86_64/corporate/3.0/RPMS/lib64gtk+-linuxfb-2.0_0-2.2.4-10.5.C30mdk.x86_64.rpm
     81ccb39f993742d2d97d00cdd74ba7c6 x86_64/corporate/3.0/RPMS/lib64gtk+-linuxfb-2.0_0-devel-2.2.4-10.5.C30mdk.x86_64.rpm
     3f4881400ba088628c2380037a88f463 x86_64/corporate/3.0/RPMS/lib64gtk+-x11-2.0_0-2.2.4-10.5.C30mdk.x86_64.rpm
     7c8aa1e0b50c0b4c810c009b55ae7199 x86_64/corporate/3.0/SRPMS/gdk-pixbuf-0.22.0-2.5.C30mdk.src.rpm
     edec45f53f6c3ffee49e46734c4ef5a9 x86_64/corporate/3.0/SRPMS/gtk+2.0-2.2.4-10.5.C30mdk.src.rpm
    

    Mandrivalinux LE2005

     35a6ddec557dd5aa4e92adbf7bb87fb0 10.2/RPMS/gdk-pixbuf-loaders-0.22.0-8.2.102mdk.i586.rpm
     7eb7bdd86ed24c78bd98002bec1f09c5 10.2/RPMS/gtk+2.0-2.6.4-2.2.102mdk.i586.rpm
     b458e6e17be27fe37f3431a5811c4f4a 10.2/RPMS/libgdk_pixbuf2.0_0-2.6.4-2.2.102mdk.i586.rpm
     8163bcf88fffcfb6c60bdc7859d61668 10.2/RPMS/libgdk_pixbuf2.0_0-devel-2.6.4-2.2.102mdk.i586.rpm
     626388ea3348c8f636faba350dae3e1f 10.2/RPMS/libgdk-pixbuf2-0.22.0-8.2.102mdk.i586.rpm
     c84174a9da4885e9258c9e8e8c30a2cf 10.2/RPMS/libgdk-pixbuf2-devel-0.22.0-8.2.102mdk.i586.rpm
     8be5808a34211ccbc5fa8800ea5c6704 10.2/RPMS/libgdk-pixbuf-gnomecanvas1-0.22.0-8.2.102mdk.i586.rpm
     b4f9403db413ba0e9be2d344f969a7b3 10.2/RPMS/libgdk-pixbuf-xlib2-0.22.0-8.2.102mdk.i586.rpm
     49be259e05e3ee1f28c4998fb8a802a1 10.2/RPMS/libgtk+2.0_0-2.6.4-2.2.102mdk.i586.rpm
     0e552b9db6b79ede9353266e49df6b79 10.2/RPMS/libgtk+2.0_0-devel-2.6.4-2.2.102mdk.i586.rpm
     c35542864bd265aa20ec4a02b15a7d02 10.2/RPMS/libgtk+-x11-2.0_0-2.6.4-2.2.102mdk.i586.rpm
     12372f097bb4fe44d6a2e8ca49eca044 10.2/SRPMS/gdk-pixbuf-0.22.0-8.2.102mdk.src.rpm
     20b3573192370e17bb3412c0bf6bf4bb 10.2/SRPMS/gtk+2.0-2.6.4-2.2.102mdk.src.rpm
    

    Mandrivalinux LE2005/X86_64

     03d62e4d17df48d30441f0ac23132aca x86_64/10.2/RPMS/gdk-pixbuf-loaders-0.22.0-8.2.102mdk.x86_64.rpm
     d016e3f9541b1c357fdb6b5c5e82c3a8 x86_64/10.2/RPMS/gtk+2.0-2.6.4-2.2.102mdk.x86_64.rpm
     f32e03ce28f88f6ce7e7441c71ce4544 x86_64/10.2/RPMS/lib64gdk_pixbuf2.0_0-2.6.4-2.2.102mdk.x86_64.rpm
     b76c5415637970eea7d11fed98856dfb x86_64/10.2/RPMS/lib64gdk_pixbuf2.0_0-devel-2.6.4-2.2.102mdk.x86_64.rpm
     9a6b58e3a653f7df35c893f87fdbe962 x86_64/10.2/RPMS/lib64gdk-pixbuf2-0.22.0-8.2.102mdk.x86_64.rpm
     615ce62271ee01aa3d6b7b06c56887e6 x86_64/10.2/RPMS/lib64gdk-pixbuf2-devel-0.22.0-8.2.102mdk.x86_64.rpm
     6eab0ae1c4b22ec6d7248cb20caff223 x86_64/10.2/RPMS/lib64gdk-pixbuf-gnomecanvas1-0.22.0-8.2.102mdk.x86_64.rpm
     93bd3152d9f2e66a8b4670ca4b530114 x86_64/10.2/RPMS/lib64gdk-pixbuf-xlib2-0.22.0-8.2.102mdk.x86_64.rpm
     fc34af6805471d36e50e8f2b0474c9ab x86_64/10.2/RPMS/lib64gtk+2.0_0-2.6.4-2.2.102mdk.x86_64.rpm
     af379d377d8570a4d8f4b2d37a8c63de x86_64/10.2/RPMS/lib64gtk+2.0_0-devel-2.6.4-2.2.102mdk.x86_64.rpm
     04bef7f1423c2c92c097c2a1f27bf385 x86_64/10.2/RPMS/lib64gtk+-x11-2.0_0-2.6.4-2.2.102mdk.x86_64.rpm
     12372f097bb4fe44d6a2e8ca49eca044 x86_64/10.2/SRPMS/gdk-pixbuf-0.22.0-8.2.102mdk.src.rpm
     20b3573192370e17bb3412c0bf6bf4bb x86_64/10.2/SRPMS/gtk+2.0-2.6.4-2.2.102mdk.src.rpm
    

    Mandrivalinux 2006

     d9d0be9e0592ba8d76c0c26e5d386a6b 2006.0/RPMS/gdk-pixbuf-loaders-0.22.0-8.2.20060mdk.i586.rpm
     6ccbf44dd9ee47a6955808b410a2d9f0 2006.0/RPMS/gtk+2.0-2.8.3-4.2.20060mdk.i586.rpm
     901d47bb921b11cd44aba20d4e16fed5 2006.0/RPMS/libgdk_pixbuf2.0_0-2.8.3-4.2.20060mdk.i586.rpm
     ed29f729ede5797e86b991c819fb4cfc 2006.0/RPMS/libgdk_pixbuf2.0_0-devel-2.8.3-4.2.20060mdk.i586.rpm
     5fd4a4e798edbd0b2946a726f5be61c0 2006.0/RPMS/libgdk-pixbuf2-0.22.0-8.2.20060mdk.i586.rpm
     7aaff9eeeb8837319966742deb2221c8 2006.0/RPMS/libgdk-pixbuf2-devel-0.22.0-8.2.20060mdk.i586.rpm
     3581c3dc40fd94c3c230e944c5dc233d 2006.0/RPMS/libgdk-pixbuf-gnomecanvas1-0.22.0-8.2.20060mdk.i586.rpm
     abfec1845b2331b6fa8e8c8ae7fd6ea8 2006.0/RPMS/libgdk-pixbuf-xlib2-0.22.0-8.2.20060mdk.i586.rpm
     820ea1b736330c4b1bea152f936afa3e 2006.0/RPMS/libgtk+2.0_0-2.8.3-4.2.20060mdk.i586.rpm
     308876775580855e3fd995eaa9a88f67 2006.0/RPMS/libgtk+2.0_0-devel-2.8.3-4.2.20060mdk.i586.rpm
     e719da9bd860af935298763e4c68e943 2006.0/RPMS/libgtk+-x11-2.0_0-2.8.3-4.2.20060mdk.i586.rpm
     1172eb0c384f302a6be7b29d1ac06ad0 2006.0/SRPMS/gdk-pixbuf-0.22.0-8.2.20060mdk.src.rpm
     c60412628b14382bd94651ba3b0510ec 2006.0/SRPMS/gtk+2.0-2.8.3-4.2.20060mdk.src.rpm
    

    Mandrivalinux 2006/X86_64

     0b0387a3898f25a2141630142a3b8644 x86_64/2006.0/RPMS/gdk-pixbuf-loaders-0.22.0-8.2.20060mdk.x86_64.rpm
     551f6613f020971c9d2d04b29a9ae8b1 x86_64/2006.0/RPMS/gtk+2.0-2.8.3-4.2.20060mdk.x86_64.rpm
     37eda74125532be96bd1bf3bf8888801 x86_64/2006.0/RPMS/lib64gdk_pixbuf2.0_0-2.8.3-4.2.20060mdk.x86_64.rpm
     63e9f0270f024ea3c556d64f10d3a95e x86_64/2006.0/RPMS/lib64gdk_pixbuf2.0_0-devel-2.8.3-4.2.20060mdk.x86_64.rpm
     5a9331585e79b29c73db5f78815c7acf x86_64/2006.0/RPMS/lib64gdk-pixbuf2-0.22.0-8.2.20060mdk.x86_64.rpm
     5d56a02664af053e3c378b181b58872f x86_64/2006.0/RPMS/lib64gdk-pixbuf2-devel-0.22.0-8.2.20060mdk.x86_64.rpm
     83e0b64b4c37f4bd0fb80222e8cbccef x86_64/2006.0/RPMS/lib64gdk-pixbuf-gnomecanvas1-0.22.0-8.2.20060mdk.x86_64.rpm
     7ae8fef556571aaebb15800196a78fd8 x86_64/2006.0/RPMS/lib64gdk-pixbuf-xlib2-0.22.0-8.2.20060mdk.x86_64.rpm
     8501607d5cec37b9ca9360a65b93016e x86_64/2006.0/RPMS/lib64gtk+2.0_0-2.8.3-4.2.20060mdk.x86_64.rpm
     e1decb7355fee5b81bcf352853b3a581 x86_64/2006.0/RPMS/lib64gtk+2.0_0-devel-2.8.3-4.2.20060mdk.x86_64.rpm
     56678f5b7f25b32b3e91bf0eb75125d8 x86_64/2006.0/RPMS/lib64gtk+-x11-2.0_0-2.8.3-4.2.20060mdk.x86_64.rpm
     1172eb0c384f302a6be7b29d1ac06ad0 x86_64/2006.0/SRPMS/gdk-pixbuf-0.22.0-8.2.20060mdk.src.rpm
     c60412628b14382bd94651ba3b0510ec x86_64/2006.0/SRPMS/gtk+2.0-2.8.3-4.2.20060mdk.src.rpm
    
  4. Apéndices

    Mayor información.

    http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:214

La Coordinación de Seguridad de la Información/UNAM-CERT agradece el apoyo en la elaboración ó traducción y revisión de éste Documento a:

  • Floriberto López Velázquez (flopez at seguridad dot unam dot mx)

UNAM-CERT
Equipo de Respuesta a Incidentes UNAM
Coordinación de Seguridad de la Información

incidentes at seguridad.unam.mx
phishing at seguridad.unam.mx
http://www.cert.org.mx
http://www.seguridad.unam.mx
ftp://ftp.seguridad.unam.mx
Tel: 56 22 81 69
Fax: 56 22 80 47


Universidad Nacional Autonoma de México Aviso legal |  Créditos |  Staff |  Administración
Copyright © Todos los derechos reservados
UNAM - CERT