|
|
Family: Debian Local Security Checks --> Category: infos
[DSA508] DSA-508-1 xpcd Vulnerability Scan
Vulnerability Scan Summary
DSA-508-1 xpcd
Detailed Explanation for this Vulnerability Test
Jaguar discovered a vulnerability in one component of xpcd, a PhotoCD
viewer. xpcd-svga, part of xpcd which uses svgalib to display
graphics on the console, would copy user-supplied data of arbitrary
length into a fixed-size buffer in the pcd_open function.
For the current stable distribution (woody) this problem has been
fixed in version 2.08-8woody2.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you update your xpcd package.
Solution : http://www.debian.org/security/2004/dsa-508
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
