Red Hat Security Advisory: Netscape security update
Netscape Navigator and Netscape Communicator 4.8 as distributed with Red Hat Enterprise Linux 2.1 contain security flaws and should not be used.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2004-0597US | high10.0 | Exploit | ||
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_… | ||||
| CVE-2004-0598US | medium5.0 | — | ||
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null deref… | ||||
| CVE-2004-0599US | medium5.0 | — | ||
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - BehobenRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - BehobenRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - BehobenRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - BehobenRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - BehobenRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan