Mandrake Linux Security Advisory : kdegraphics (MDKSA-2006:227)

medium Nessus Plugin ID 24610

Synopsis

The remote Mandrake Linux host is missing one or more security updates.

Description

Stack overflow in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion.

The updated packages have been patched to correct this issue.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 24610

File Name: mandrake_MDKSA-2006-227.nasl

Version: 1.16

Type: local

Family: Mandriva Local Security Checks

Published: 2/18/2007

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:kdegraphics, p-cpe:/a:mandriva:linux:kdegraphics-common, p-cpe:/a:mandriva:linux:kdegraphics-kcolorchooser, p-cpe:/a:mandriva:linux:kdegraphics-kcoloredit, p-cpe:/a:mandriva:linux:kdegraphics-kdvi, p-cpe:/a:mandriva:linux:kdegraphics-kfax, p-cpe:/a:mandriva:linux:kdegraphics-kghostview, p-cpe:/a:mandriva:linux:kdegraphics-kiconedit, p-cpe:/a:mandriva:linux:kdegraphics-kolourpaint, p-cpe:/a:mandriva:linux:kdegraphics-kooka, p-cpe:/a:mandriva:linux:kdegraphics-kpdf, p-cpe:/a:mandriva:linux:kdegraphics-kpovmodeler, p-cpe:/a:mandriva:linux:kdegraphics-kruler, p-cpe:/a:mandriva:linux:kdegraphics-ksnapshot, p-cpe:/a:mandriva:linux:kdegraphics-ksvg, p-cpe:/a:mandriva:linux:kdegraphics-kuickshow, p-cpe:/a:mandriva:linux:kdegraphics-kview, p-cpe:/a:mandriva:linux:kdegraphics-mrmlsearch, p-cpe:/a:mandriva:linux:lib64kdegraphics0-common, p-cpe:/a:mandriva:linux:lib64kdegraphics0-common-devel, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kghostview, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kghostview-devel, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kooka, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kooka-devel, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kpovmodeler, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kpovmodeler-devel, p-cpe:/a:mandriva:linux:lib64kdegraphics0-ksvg, p-cpe:/a:mandriva:linux:lib64kdegraphics0-ksvg-devel, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kview, p-cpe:/a:mandriva:linux:lib64kdegraphics0-kview-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-common, p-cpe:/a:mandriva:linux:libkdegraphics0-common-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-kghostview, p-cpe:/a:mandriva:linux:libkdegraphics0-kghostview-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-kooka, p-cpe:/a:mandriva:linux:libkdegraphics0-kooka-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-kpovmodeler, p-cpe:/a:mandriva:linux:libkdegraphics0-kpovmodeler-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-ksvg, p-cpe:/a:mandriva:linux:libkdegraphics0-ksvg-devel, p-cpe:/a:mandriva:linux:libkdegraphics0-kview, p-cpe:/a:mandriva:linux:libkdegraphics0-kview-devel, cpe:/o:mandriva:linux:2007

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 12/11/2006

Reference Information

CVE: CVE-2006-6297

CWE: 399

MDKSA: 2006:227

Detections

Analytics