Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.67429
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Security Advisory MDVSA-2010:102 (ghostscript)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to ghostscript
announced via advisory MDVSA-2010:102.

A vulnerability has been found and corrected in ghostscript:

Stack-based buffer overflow in the parser function in GhostScript 8.70
and 8.64 allows context-dependent attackers to execute arbitrary code
via a crafted PostScript file (CVE-2010-1869).

Packages for 2008.0 and 2009.0 are provided due to the Extended
Maintenance Program for those products.

The updated packages have been patched to correct this issue.

Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0,
Enterprise Server 5.0


Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2010:102

Risk factor : Critical

CVSS Score:
9.3

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-1869
BugTraq ID: 40103
http://www.securityfocus.com/bid/40103
Bugtraq: 20100512 Multiple memory corruption vulnerabilities in Ghostscript (Google Search)
http://www.securityfocus.com/archive/1/511243/100/0/threaded
http://www.mandriva.com/security/advisories?name=MDVSA-2010:102
http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html
http://www.securitytracker.com/id?1024003
http://secunia.com/advisories/39753
http://secunia.com/advisories/40580
SuSE Security Announcement: SUSE-SR:2010:014 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://www.ubuntu.com/usn/USN-961-1
http://www.vupen.com/english/advisories/2010/1138
http://www.vupen.com/english/advisories/2010/1195
CopyrightCopyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.