USN-108-1: GDK vulnerability
6 April 2005
GDK vulnerability
Releases
Details
Matthias Clasen discovered a Denial of Service vulnerability in the
BMP image module of gdk. Processing a specially crafted BMP image with
an application using gdk-pixbuf caused an allocated memory block to be
free()'ed twice, leading to a crash of the application. However, it
is believed that this cannot be exploited to execute arbitrary
attacker provided code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 4.10
-
libgtk2.0-0
-
-
libgdk-pixbuf2
-
In general, a standard system update will make all the necessary changes.