Test Kennung:	1.3.6.1.4.1.25623.1.0.66421
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2009:243-2 (freetype2)
Zusammenfassung:	The remote host is missing an update to freetype2;announced via advisory MDVSA-2009:243-2.
Beschreibung:	Summary: The remote host is missing an update to freetype2 announced via advisory MDVSA-2009:243-2. Vulnerability Insight: Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. This update corrects the problem. Update: Packages for 2008.0 are being provided due to extended support for Corporate products. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0946 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html BugTraq ID: 34550 http://www.securityfocus.com/bid/34550 Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Debian Security Information: DSA-1784 (Google Search) http://www.debian.org/security/2009/dsa-1784 http://security.gentoo.org/glsa/glsa-200905-05.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:243 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149 http://www.redhat.com/support/errata/RHSA-2009-0329.html http://www.redhat.com/support/errata/RHSA-2009-1061.html http://www.redhat.com/support/errata/RHSA-2009-1062.html http://secunia.com/advisories/34723 http://secunia.com/advisories/34913 http://secunia.com/advisories/34967 http://secunia.com/advisories/35065 http://secunia.com/advisories/35074 http://secunia.com/advisories/35198 http://secunia.com/advisories/35200 http://secunia.com/advisories/35204 http://secunia.com/advisories/35210 http://secunia.com/advisories/35379 http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1 SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://www.ubuntu.com/usn/USN-767-1 http://www.vupen.com/english/advisories/2009/1058 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1621
Copyright	Copyright (C) 2009 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.