Test Kennung:	1.3.6.1.4.1.25623.1.0.51363
Kategorie:	Conectiva Local Security Checks
Titel:	Conectiva Security Advisory CLA-2004:866
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory CLA-2004:866. QT[1] is a cross-platform GUI toolkit mostly used by KDE. Chris Evans found[2] a heap overflow vulnerability[3] in the QT library when handling 8-bit RLE encoded BMP files. An attacker could use this to compromise the account used to view the specially crafted image. Further investigations found similar vulnerabilities in XPM[4], GIF[5] and JPEG image handlers. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.qt.org http://marc.theaimsgroup.com/?l=bugtraq&m=109295309008309&w=2 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0691 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0692 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0693 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:866 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0691 Bugtraq: 20040818 CESA-2004-004: qt (Google Search) http://marc.info/?l=bugtraq&m=109295309008309&w=2 Debian Security Information: DSA-542 (Google Search) http://www.debian.org/security/2004/dsa-542 http://security.gentoo.org/glsa/glsa-200408-20.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485 http://www.redhat.com/support/errata/RHSA-2004-414.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 SuSE Security Announcement: SUSE-SA:2004:027 (Google Search) http://www.novell.com/linux/security/advisories/2004_27_qt3.html XForce ISS Database: qt-bmp-bo(17040) https://exchange.xforce.ibmcloud.com/vulnerabilities/17040 Common Vulnerability Exposure (CVE) ID: CVE-2004-0692 http://marc.info/?l=bugtraq&m=110979666528890&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327 XForce ISS Database: qt-xpm-dos(17041) https://exchange.xforce.ibmcloud.com/vulnerabilities/17041 Common Vulnerability Exposure (CVE) ID: CVE-2004-0693 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883 XForce ISS Database: qt-gif-dos(17042) https://exchange.xforce.ibmcloud.com/vulnerabilities/17042
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.