French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Advisories and vulnerabilities by Vendor
Advisories and vulnerabilities by Keyword
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Fedora Security Update Fixes Wesnoth UTF-8 Denial of Service Issue


Title : Fedora Security Update Fixes Wesnoth UTF-8 Denial of Service Issue
Advisory ID : FrSIRT/ADV-2007-3478
CVE ID : CVE-2007-3917
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-10-12

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

A vulnerability has been identified in Fedora, which could be exploited by attackers to cause a denial of service [...]

Solution

Upgrade the affected packages :

86fa718f30baadcf52679f8b23b384837b451033 wesnoth-server-1.2.7-1.fc7.ppc64.rpm
00b19cfeffebfbc84628aa75af3370d116470f04 wesnoth-debuginfo-1.2.7-1.fc7.ppc64.rpm
51c728a81880f7f121bdff5857832428d2453297 wesnoth-1.2.7-1.fc7.ppc64.rpm
6e3f912d8f6e888f5f6d4ca84df7e82780e8eb79 wesnoth-tools-1.2.7-1.fc7.ppc64.rpm
fc41769352b116b2f35864af7ae18862b23e80c2 wesnoth-debuginfo-1.2.7-1.fc7.i386.rpm
a2ce210c91148fac50ba45f7c24c076a9f093321 wesnoth-tools-1.2.7-1.fc7.i386.rpm
bbdfaca0653bb6f91ef768895d9720085022531d wesnoth-server-1.2.7-1.fc7.i386.rpm
3984143fce4a6dda00c6727fb3e0d3078c060b5a wesnoth-1.2.7-1.fc7.i386.rpm
05efbcfbb82e65d3fcc97e577f00bfc94d3dc87c wesnoth-1.2.7-1.fc7.x86_64.rpm
507ce62d6fee103d3a2265ccf33a0dfafcc24546 wesnoth-debuginfo-1.2.7-1.fc7.x86_64.rpm
0a055ea8a91b1b81cc25a7c3005d8794f581897a wesnoth-tools-1.2.7-1.fc7.x86_64.rpm
a96ae74484286aab773b41cb36cfca8c4537b213 wesnoth-server-1.2.7-1.fc7.x86_64.rpm
f6ee0603946fe50fcf332536dd70deb18db30d4c wesnoth-debuginfo-1.2.7-1.fc7.ppc.rpm
7a2b12e84b8fd584a3845c36ac1d8f251f55a410 wesnoth-tools-1.2.7-1.fc7.ppc.rpm
09f216ddf5cc21d2bbf0dbe6bbb44c17876aa6c7 wesnoth-server-1.2.7-1.fc7.ppc.rpm
23770542db222b2d849100d83dd8b5c285d074fa wesnoth-1.2.7-1.fc7.ppc.rpm
dd90f7d33b4827d3bf6fb6b3b67f7b90a166928d wesnoth-1.2.7-1.fc7.src.rpm

ChangeLog

2007-10-12 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Mozilla Firefox for Mac OS X GIF Rendering Code Execution Vulnerability

Mozilla Products Remote Code Execution and Security Bypass Issues

Mozilla Products Code Execution and Injection Vulnerabilities

Mozilla JavaScript Garbage Collector Code Execution Vulnerability

Mozilla Thunderbird Code Execution and Cross Site Scripting Issues

Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues

Microsoft Visual Studio "Msmask32" Code Execution Vulnerability

Microsoft PowerPoint Command Execution Vulnerabilities (MS08-051)

Microsoft Windows Messenger Data Disclosure (MS08-050)

Microsoft Windows Event System Code Execution (MS08-049)

Microsoft Outlook and Mail Security Bypass Vulnerability (MS08-048)

Microsoft Windows IPsec Policy Data Disclosure Vulnerability (MS08-047)

Microsoft Windows MSCMS Code Execution Vulnerability (MS08-046)

Oracle Products Multiple Code Execution and Security Bypass Issues

Oracle Products Command Execution and SQL Injection Vulnerabilities

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle Database "PITRIG_DROPMETADATA" Buffer Overflow Vulnerability

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle JInitiator ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Oracle Products Multiple Remote Command Execution and SQL Injection Vulnerabilities

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy