漏洞信息详情
Wine 'gdi/driver.c和gdi/printdrv.c' 任意代码执行漏洞
漏洞简介
Wine 20050930和其他版本中的gdi/driver.c和gdi/printdrv.c,针对Windows Metafile (WMF)文件实施SETABORTPROC GDI Escape函数调用,攻击者可以执行任意代码。
漏洞公告
参考网址
来源: VUPEN
名称: ADV-2006-0098
链接:http://www.frsirt.com/english/advisories/2006/0098
来源: SECUNIA
名称: 18323
链接:http://secunia.com/advisories/18323
来源: MISC
链接:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346197
来源: MLIST
名称: [Dailydave] 20060105 WMF goes away :
链接:http://lists.immunitysec.com/pipermail/dailydave/2006-January/002806.html
来源: XF
名称: win-wmf-execute-code(23846)
链接:http://xforce.iss.net/xforce/xfdb/23846
来源: BUGTRAQ
名称: 20060117 ERRATA: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability
链接:http://www.securityfocus.com/archive/1/archive/1/422128/100/0/threaded
来源: SUSE
名称: SUSE-SR:2006:002
链接:http://www.novell.com/linux/security/advisories/2006_02_sr.html
来源: MANDRIVA
名称: MDKSA-2006:014
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:014
来源: GENTOO
名称: GLSA-200601-09
链接:http://www.gentoo.org/security/en/glsa/glsa-200601-09.xml
来源: DEBIAN
名称: DSA-954
链接:http://www.debian.org/security/2006/dsa-954
来源: SECUNIA
名称: 18578
链接:http://secunia.com/advisories/18578
来源: SECUNIA
名称: 18549
链接:http://secunia.com/advisories/18549
来源: SECUNIA
名称: 18451
链接:http://secunia.com/advisories/18451
来源: MANDRIVA
名称: MDKSA-2006:014
链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:014
受影响实体
- Wine Wine:2005-09-30<!--2000-1-1-->
- Wine Wine:0.9.5<!--2000-1-1-->
- Wine Wine:0.9.2<!--2000-1-1-->
- Wine Wine:0.9.4<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...