REDHAT-BUG-981197
First published: Thu Jul 04 2013(Updated: )
A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this file (certain URL fragments were not stripped properly when these files were called via direct URL request(s)). A remote attacker could use this flaw to conduct replay attacks. A different vulnerability than <a href="https://access.redhat.com/security/cve/CVE-2013-2138">CVE-2013-2138</a>. References: [1] <a href="http://galleryproject.org/gallery_3_0_9">http://galleryproject.org/gallery_3_0_9</a> Upstream ticket: [2] <a href="http://sourceforge.net/apps/trac/gallery/ticket/2073">http://sourceforge.net/apps/trac/gallery/ticket/2073</a> Relevant upstream patch: [3] <a href="https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733">https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NotFound Gallery |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2013-2138
- http://galleryproject.org/gallery_3_0_9
- http://sourceforge.net/apps/trac/gallery/ticket/2073
- https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733
- http://www.openwall.com/lists/oss-security/2013/07/04/7
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=981218
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=981219
- https://bugzilla.redhat.com/show_bug.cgi?id=981197
Frequently Asked Questions
What is the severity of REDHAT-BUG-981197?
REDHAT-BUG-981197 is considered a moderate severity vulnerability affecting the flowplayer SWF file handling in Gallery version 3.
How do I fix REDHAT-BUG-981197?
To fix REDHAT-BUG-981197, update to the latest version of the Gallery software that addresses this vulnerability.
What software is affected by REDHAT-BUG-981197?
REDHAT-BUG-981197 affects Gallery version 3, which is an open source photo sharing web application.
What impact does REDHAT-BUG-981197 have on users?
The vulnerability in REDHAT-BUG-981197 may allow for improper handling of certain URL fragments, potentially exposing users to security risks.
Is there a patch available for REDHAT-BUG-981197?
Yes, a patch or updated version that resolves REDHAT-BUG-981197 is typically made available by the Gallery project.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-2240
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gallery
- canonical/notfound gallery