• info
• discussion
• exploit
• solution
• references

KDE JPEG KFile Info Plug-in EXIF Local Denial of Service Vulnerability

Solution:
The vendor has released a patch to address this issue. Please see the references for more information.


KDE kdegraphics 3.5.4

• Mandriva lib64kdegraphics0-kooka-3.5.4-0.2.20060mlcs4.x86_64.rpm
  Corporate 4.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64kdegraphics0-kooka-devel-3.5.4-0.2.20060mlcs4.x86_64.rpm
  Corporate 4.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libkdegraphics0-kooka-3.5.4-0.2.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva libkdegraphics0-kooka-devel-3.5.4-0.2.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download

KDE KDE 3.5.5

• KDE post-3.5.5-kdegraphics.diff
  1ce5fb77aff8f97ed21da046c1385000
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.5.5-kdegraphics.diff