[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2009:1471-01 -- Redhat elinks

ID: oval:org.secpod.oval:def:500633Date: (C)2012-01-31   (M)2023-12-07
Class: PATCHFamily: unix




ELinks is a text-based Web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially-crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered. It was discovered that ELinks tried to load translation files using relative paths. A local attacker able to trick a victim into running ELinks in a folder containing specially-crafted translation files could use this flaw to confuse the victim via incorrect translations, or cause ELinks to crash and possibly execute arbitrary code via embedded formatting sequences in translated messages. All ELinks users are advised to upgrade to this updated package, which contains backported patches to resolve these issues.

Platform:
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4
Product:
elinks
Reference:
RHSA-2009:1471-01
CVE-2007-2027
CVE-2008-7224
CVE    2
CVE-2007-2027
CVE-2008-7224
CPE    3
cpe:/o:redhat:enterprise_linux:5
cpe:/o:redhat:enterprise_linux:4
cpe:/a:elinks:elinks

© SecPod Technologies