[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247621

 
 

909

 
 

194512

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

MDVSA-2012:061 -- Mandriva raptor

ID: oval:org.secpod.oval:def:1300035Date: (C)2013-04-08   (M)2024-02-19
Class: PATCHFamily: unix




An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If an application linked against Raptor were to open a specially-crafted RDF file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running the application had access to. A bug in the way Raptor handled external entities could cause that application to crash or, possibly, execute arbitrary code with the privileges of the user running the application . The updated packages have been patched to correct this issue. raptor2 for Mandriva Linux 2011 has been upgraded to the 2.0.7 version which is not vulnerable to this issue.

Platform:
Mandriva Enterprise Server 5.2
Product:
raptor
Reference:
MDVSA-2012:061
CVE-2012-0037
CVE    1
CVE-2012-0037
CPE    1
cpe:/o:mandriva:enterprise_server:5.2

© SecPod Technologies