REDHAT-BUG-981197: Low severity Gallery Gallery vulnerability

Published Jul 4, 2013

Updated

A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this file (certain URL fragments were not stripped properly when these files were called via direct URL request(s)). A remote attacker could use this flaw to conduct replay attacks.

A different vulnerability than CVE-2013-2138.

References: [1] http://galleryproject.org/gallery309

Upstream ticket: [2] http://sourceforge.net/apps/trac/gallery/ticket/2073

Relevant upstream patch: [3] https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733

Affected Software

1 affected component

Gallery Gallery

Event History

Jul 4, 2013

Data Sourced

via Red Hat·09:05 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-981197?

REDHAT-BUG-981197 is considered a moderate severity vulnerability affecting the flowplayer SWF file handling in Gallery version 3.

How do I fix REDHAT-BUG-981197?

To fix REDHAT-BUG-981197, update to the latest version of the Gallery software that addresses this vulnerability.

What software is affected by REDHAT-BUG-981197?

REDHAT-BUG-981197 affects Gallery version 3, which is an open source photo sharing web application.

What impact does REDHAT-BUG-981197 have on users?

The vulnerability in REDHAT-BUG-981197 may allow for improper handling of certain URL fragments, potentially exposing users to security risks.

Is there a patch available for REDHAT-BUG-981197?

Yes, a patch or updated version that resolves REDHAT-BUG-981197 is typically made available by the Gallery project.