Test ID:	1.3.6.1.4.1.25623.1.0.50405
Category:	Fedora Local Security Checks
Title:	Fedora Core 2 FEDORA-2004-301 (imlib)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to imlib announced via advisory FEDORA-2004-301. Several heap overflow vulnerabilities have been found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0817 to this issue. Users of imlib should update to this updated package which contains backported patches and is not vulnerable to these issues. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ c6ed83101974d8283a4013a80e356c08 SRPMS/imlib-1.9.13-19.src.rpm 9f6952bd21d1157b4c10dde7f87b8a3d x86_64/imlib-1.9.13-19.x86_64.rpm e70a8c0dec245aea672da1f1608e1e33 x86_64/imlib-devel-1.9.13-19.x86_64.rpm 64aa17fe9a0ea4efa9d48020212274c9 x86_64/imlib-cfgeditor-1.9.13-19.x86_64.rpm 48ef8b28ae79d1c7c82974e7f6b77e86 x86_64/debug/imlib-debuginfo-1.9.13-19.x86_64.rpm d9d04d9df1981e22e45853789a99db19 i386/imlib-1.9.13-19.i386.rpm 9589803f0299131a91bf78ea62cf68c3 i386/imlib-devel-1.9.13-19.i386.rpm b602fcb2d9d57b87abd57792b17c84c1 i386/imlib-cfgeditor-1.9.13-19.i386.rpm fe0ab8902a4f20532cea1f1d988add08 i386/debug/imlib-debuginfo-1.9.13-19.i386.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://www.fedoranews.org/updates/FEDORA-2004-301.shtml Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 11084 Common Vulnerability Exposure (CVE) ID: CVE-2004-0817 http://www.securityfocus.com/bid/11084 Conectiva Linux advisory: CLA-2004:870 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Debian Security Information: DSA-548 (Google Search) http://www.debian.org/security/2004/dsa-548 http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:089 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843 http://www.redhat.com/support/errata/RHSA-2004-465.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 XForce ISS Database: imlib-bmp-bo(17182) https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.