Test Kennung:	1.3.6.1.4.1.25623.1.0.68734
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2011:005 (evince)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to evince announced via advisory MDVSA-2011:005. Multiple vulnerabilities has been found and corrected in evince: Array index error in the PK and VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2640, CVE-2010-2641). Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2642). Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2643). The updated packages have been patched to correct these issues. Affected: 2010.0, 2010.1, Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2011:005 Risk factor : High CVSS Score: 7.6
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2640 BugTraq ID: 45678 http://www.securityfocus.com/bid/45678 Debian Security Information: DSA-2357 (Google Search) http://www.debian.org/security/2011/dsa-2357 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html http://lists.mandriva.com/security-announce/2011-01/msg00006.php http://www.redhat.com/support/errata/RHSA-2011-0009.html http://www.securitytracker.com/id?1024937 http://secunia.com/advisories/42769 http://secunia.com/advisories/42821 http://secunia.com/advisories/42847 http://secunia.com/advisories/42872 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.ubuntu.com/usn/USN-1035-1 http://www.vupen.com/english/advisories/2011/0029 http://www.vupen.com/english/advisories/2011/0043 http://www.vupen.com/english/advisories/2011/0056 http://www.vupen.com/english/advisories/2011/0097 http://www.vupen.com/english/advisories/2011/0102 http://www.vupen.com/english/advisories/2011/0212 Common Vulnerability Exposure (CVE) ID: CVE-2010-2641 Common Vulnerability Exposure (CVE) ID: CVE-2010-2642 https://security.gentoo.org/glsa/201701-57 http://www.mandriva.com/security/advisories?name=MDVSA-2011:016 http://www.mandriva.com/security/advisories?name=MDVSA-2011:017 http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 RedHat Security Advisories: RHSA-2012:1201 http://rhn.redhat.com/errata/RHSA-2012-1201.html SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.vupen.com/english/advisories/2011/0193 http://www.vupen.com/english/advisories/2011/0194 Common Vulnerability Exposure (CVE) ID: CVE-2010-2643
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.