Mandriva Linux Security Advisory : cairo (MDVSA-2008:019)
Medium Nessus Plugin ID 36463
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionPeter Valchev discovered that Cairo did not correctly decode PNG image data. By tricking a user or automated system into processing a specially crafted PNG with Cairo, a remote attacker could execute arbitrary code with the privileges of the user opening the file.
The updated packages have been patched to correct this issue.
SolutionUpdate the affected packages.