Test Kennung:	1.3.6.1.4.1.25623.1.0.64341
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2009:144 (ghostscript)
Zusammenfassung:	The remote host is missing an update to ghostscript;announced via advisory MDVSA-2009:144.
Beschreibung:	Summary: The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:144. Vulnerability Insight: Multiple security vulnerabilities has been identified and fixed in ghostscript: Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation (CVE-2008-3520). Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (CVE-2008-3522). Previously the ghostscript packages were statically built against a bundled and private copy of the jasper library. This update makes ghostscript link against the shared system jasper library which makes it easier to address presumptive future security issues in the jasper library. Affected: 2008.1, 2009.0, 2009.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3520 BugTraq ID: 31470 http://www.securityfocus.com/bid/31470 http://security.gentoo.org/glsa/glsa-200812-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 http://www.mandriva.com/security/advisories?name=MDVSA-2009:144 http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 http://bugs.gentoo.org/show_bug.cgi?id=222819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141 http://www.redhat.com/support/errata/RHSA-2009-0012.html RedHat Security Advisories: RHSA-2015:0698 http://rhn.redhat.com/errata/RHSA-2015-0698.html http://secunia.com/advisories/33173 http://secunia.com/advisories/34391 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 http://www.ubuntu.com/usn/USN-742-1 XForce ISS Database: jasper-image-file-bo(45621) https://exchange.xforce.ibmcloud.com/vulnerabilities/45621 Common Vulnerability Exposure (CVE) ID: CVE-2008-3522 http://bugs.gentoo.org/attachment.cgi?id=163282&action=view XForce ISS Database: jasper-jasstreamprintf-bo(45623) https://exchange.xforce.ibmcloud.com/vulnerabilities/45623
Copyright	Copyright (C) 2009 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.