USN-993-1: libgdiplus vulnerability

Releases

• Ubuntu 10.04
• Ubuntu 9.10
• Ubuntu 9.04
• Ubuntu 8.04

Packages

• libgdiplus -

Details

Stefan Cornelius discovered that libgdiplus incorrectly handled certain
image files. If a user or automated system were tricked into opening a
crafted image file, an attacker could cause a denial of service or possibly
execute arbitrary code with the privileges of the user invoking the
program.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• libgdiplus - 2.4.2-1ubuntu0.9.10.1

Ubuntu 9.04

• libgdiplus - 2.0-1ubuntu0.1

Ubuntu 8.04

• libgdiplus - 1.2.6-2ubuntu2.1

Ubuntu 10.04

• libgdiplus - 2.4.2-1ubuntu0.10.04.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2010-1526