Mandrake Linux Security Advisory : qt3 (MDKSA-2004:085)
High Nessus Plugin ID 14334
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionChris Evans discovered a heap-based overflow in the QT library when handling 8-bit RLE encoded BMP files. This vulnerability could allow for the compromise of the account used to view or browse malicious BMP files. On subsequent investigation, it was also found that the handlers for XPM, GIF, and JPEG image types were also faulty.
These problems affect all applications that use QT to handle image files, such as QT-based image viewers, the Konqueror web browser, and others.
The updated packages have been patched to correct these problems.
SolutionUpdate the affected packages.