Mandriva- Advisories MDVSA-2008:019: Updated cairo packages fix vulnerability

[Mandriva]

Advisories MDVSA-2008:019: Updated cairo packages fix vulnerability
Peter Valchev discovered that Cairo did not correctly decode PNG
image data. By tricking a user or automated system into processing
a specially crafted PNG with Cairo, a remote attacker could execute
arbitrary code with the privileges of the user opening the file.

The updated packages have been patched to correct this issue.
http://mandrivausers.org/index.php?showtopic=47664
http://mandrivausers.org/index.php?showtopic=47664
Tue, 22 Jan 2008 07:25:11 +0000