|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200412-17] kfax: Multiple overflows in the included TIFF library Vulnerability Scan
Vulnerability Scan Summary
kfax: Multiple overflows in the included TIFF library
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200412-17
(kfax: Multiple overflows in the included TIFF library)
Than Ngo discovered that kfax contains a private copy of the TIFF
library and is therefore subject to several known vulnerabilities (see
References).
Impact
A remote attacker could entice a user to view a carefully-crafted TIFF
image file with kfax, which would potentially lead to execution of
arbitrary code with the rights of the user running kfax.
Workaround
The KDE Team recommends to remove the kfax binary as well as the
kfaxpart.la KPart:
rm /usr/kde/3.*/lib/kde3/kfaxpart.la
rm /usr/kde/3.*/bin/kfax
Note: This will render the kfax functionality useless, if kfax
functionality is needed you should upgrade to the KDE 3.3.2 which is
not stable at the time of this writing.
There is no known workaround at this time.
References:
http://www.kde.org/info/security/advisory-20041209-2.txt
http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0886
Solution:
All kfax users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=kde-base/kdegraphics-3.3.2"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
