Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

KDE Personal Information Management Suite VCF File Remote Buffer Overflow Vulnerability

Solution:
Slackware has released an advisory SSA:2004-014-01 with fixes to address this issue. Please see the referenced advisory for additional information. Fixes are linked below.

The vendor has released KDE version 3.1.5 to address this issue. A patch has been made available for KDE 3.1.4 for users who are unable to upgrade to version 3.1.5.

RedHat has released an advisory RHSA-2004:006-01 with fixes to address this issue. Please see the referenced advisory for more information.

Mandrake has released an advisory MDKSA-2004:003 with fixes to address this issue. Please see the referenced advisory for more information.

Conectiva has released advisory CLA-2004:810 to address this issue.

Gentoo Linux has released advisory GLSA 200404-02 dealing with this issue. It advises users to upgrade to the newer package using the following sequence of commands:

Gentoo KDE users should upgrade to version 3.1.5 or later:
emerge sync
emerge -pv ">=kde-base/kde-3.1.5"
emerge ">=kde-base/kde-3.1.5"

Please see the referenced Gentoo advisory for more information.

Red Hat Fedora has released advisory FEDORA-2004-133 dealing with this issue. Please see the referenced advisory for more information.


RedHat kdepim-3.1-5.i386.rpm

RedHat Fedora Core1

Slackware Linux -current

RedHat kdepim-devel-3.1-5.i386.rpm

KDE KDE 3.1.4

Slackware Linux 9.0

Slackware Linux 9.1

MandrakeSoft Linux Mandrake 9.1

MandrakeSoft Linux Mandrake 9.1 ppc

MandrakeSoft Linux Mandrake 9.2 amd64

MandrakeSoft Linux Mandrake 9.2







 

Privacy Statement
Copyright 2009, SecurityFocus