Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.56520
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: dia, dia-gnome
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following packages are affected:

dia
dia-gnome

CVE-2006-1550
Multiple buffer overflows in the xfig import code (xfig-import.c) in
Dia 0.87 and later before 0.95-pre6 allow user-complicit attackers to
have an unknown impact via a crafted xfig file, possibly involving an
invalid (1) color index, (2) number of points, or (3) depth.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
7.6

CVSS Vector:
AV:N/AC:H/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-1550
1015853
http://securitytracker.com/id?1015853
17310
http://www.securityfocus.com/bid/17310
19469
http://secunia.com/advisories/19469
19505
http://secunia.com/advisories/19505
19507
http://secunia.com/advisories/19507
19543
http://secunia.com/advisories/19543
19546
http://secunia.com/advisories/19546
19765
http://secunia.com/advisories/19765
19897
http://secunia.com/advisories/19897
19959
http://secunia.com/advisories/19959
20060329 Buffer overflows in Dia XFig import
http://www.securityfocus.com/archive/1/429357/100/0/threaded
DSA-1025
http://www.debian.org/security/2006/dsa-1025
FEDORA-2006-261
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html
GLSA-200604-14
http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml
MDKSA-2006:062
http://www.mandriva.com/security/advisories?name=MDKSA-2006:062
RHSA-2006:0280
http://www.redhat.com/support/errata/RHSA-2006-0280.html
SUSE-SR:2006:009
http://www.novell.com/linux/security/advisories/2006_04_28.html
USN-266-1
https://usn.ubuntu.com/266-1/
[dia-list] 20060329 Vulnerability in xfig import code
http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html
diaxfig-xfig-import-bo(25566)
https://exchange.xforce.ibmcloud.com/vulnerabilities/25566
oval:org.mitre.oval:def:10361
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.