Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2005:187: dia Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the dia package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2005:187 (dia).
Joxean Koret discovered that the Python SVG import test in dia, a
vector-oriented diagram editor, does not properly sanitise data read from an
SVG file and is hence vulnerable to execute arbitrary Python code.
The updated packages have been patched to address this issue.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:187
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.