|| ||rPath Update Announcements <firstname.lastname@example.org>|
|| ||email@example.com, firstname.lastname@example.org|
|| ||rPSA-2008-0046-1 gd|
|| ||Wed, 06 Feb 2008 14:09:09 -0500|
|| ||email@example.com, firstname.lastname@example.org,
rPath Security Advisory: 2008-0046-1
rPath Linux 1
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
rPath Issue Tracking System:
Previous versions of the gd package are vulnerable to a possible
Arbitrary Code Execution attack in which an attacker may use a
maliciously crafted GIF file to trigger a buffer overflow. The libgd
library is not exposed via any privileged or remote interfaces within
rPath Linux per se, but it may be exposed by some web applications.
Copyright 2008 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
to post comments)