Summary
The remote host is missing an update to kdegraphics announced via advisory DSA 1866-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201866-1
Insight
Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems:
CVE-2009-0945
It was discovered that the KSVG animation element implementation suffers from a null pointer dereference flaw, which could lead to the execution of arbitrary code.
CVE-2009-1709
It was discovered that the KSVG animation element implementation is prone to a use-after-free flaw, which could lead to the execution of arbitrary code.
For the stable distribution (lenny), these problems have been fixed in version 4:3.5.9-3+lenny2.
For the oldstable distribution (etch), these problems have been fixed in version 4:3.5.5-3etch4.
For the testing distribution (squeeze) and the unstable distribution (sid), these problems have been fixed in version 4:4.0.
We recommend that you upgrade your kdegraphics packages.
Severity
Classification
-
CVE CVE-2009-0945, CVE-2009-1709 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities