Steve Kemp has reported two vulnerabilities in GNOME-DB libgda, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to format string errors in the "gda_log_error()" and the "gda_log_message()" functions of "gda-log.c". This may be exploited to execute arbitrary code in a vulnerable application.

The vulnerability affects version 1.9.100. Other versions may also be affected.

Note: The vulnerability potentially affects all applications that use libgda.

Solution
Disable the logging functionality in libgda.
Further details available in Customer Area

Provided and/or discovered by
Steve Kemp

Original Advisory
Debian:
http://www.debian.org/security/2005/dsa-871

Deep Links
Links available in Customer Area