[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2009:1130-01 -- Redhat kdegraphics

ID: oval:org.secpod.oval:def:500596Date: (C)2012-01-31   (M)2023-12-07
Class: PATCHFamily: unix




The kdegraphics packages contain applications for the K Desktop Environment . Scalable Vector Graphics is an XML-based language to describe vector images. KSVG is a framework aimed at implementing the latest W3C SVG specifications. A use-after-free flaw was found in the KDE KSVG animation element implementation. A remote attacker could create a specially-crafted SVG image, which once opened by an unsuspecting user, could cause a denial of service or, potentially, execute arbitrary code with the privileges of the user running Konqueror. A NULL pointer dereference flaw was found in the KDE, KSVG SVGList interface implementation. A remote attacker could create a specially-crafted SVG image, which once opened by an unsuspecting user, would cause memory corruption, leading to a denial of service . All users of kdegraphics should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 5
Product:
kdegraphics
Reference:
RHSA-2009:1130-01
CVE-2009-0945
CVE-2009-1709
CVE    2
CVE-2009-0945
CVE-2009-1709
CPE    2
cpe:/o:redhat:enterprise_linux:5
cpe:/a:kde:kdegraphics

© SecPod Technologies