Lucene search

K
centosCentOS ProjectCESA-2006:0272-01
HistoryApr 04, 2006 - 11:06 p.m.

openmotif security update

2006-04-0423:06:34
CentOS Project
lists.centos.org
46

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.7%

CentOS Errata and Security Advisory CESA-2006:0272-01

OpenMotif provides libraries which implement the Motif industry standard
graphical user interface.

A number of buffer overflow flaws were discovered in OpenMotif’s libUil
library. It is possible for an attacker to execute arbitrary code as a
victim who has been tricked into executing a program linked against
OpenMotif, which then loads a malicious User Interface Language (UIL) file.
(CVE-2005-3964)

Users of OpenMotif are advised to upgrade to these erratum packages, which
contain a backported security patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-April/074962.html

Affected packages:
openmotif
openmotif-devel

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.7%