Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.831516
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Update for icu MDVSA-2011:194 (icu)
Zusammenfassung:The remote host is missing an update for the 'icu'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'icu'
package(s) announced via the referenced advisory.

Vulnerability Insight:
A vulnerability has been discovered and corrected in icu:

A stack-based buffer overflow flaw was found in the way ICU
performed variant canonicalization for some locale identifiers. If a
specially-crafted locale representation was opened in an application
linked against ICU, it could cause the application to crash or,
possibly, execute arbitrary code with the privileges of the user
running the application (CVE-2011-4599).

The updated packages have been patched to correct this issue.

Affected Software/OS:
icu on Mandriva Linux 2010.1,
Mandriva Linux 2010.1/X86_64,
Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64

Solution:
Please Install the Updated Packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-4599
47146
http://secunia.com/advisories/47146
47227
http://secunia.com/advisories/47227
47674
http://secunia.com/advisories/47674
47714
http://secunia.com/advisories/47714
47775
http://secunia.com/advisories/47775
51006
http://www.securityfocus.com/bid/51006
77698
http://www.osvdb.org/77698
APPLE-SA-2012-09-19-1
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
APPLE-SA-2012-09-19-2
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
DSA-2397
http://www.debian.org/security/2012/dsa-2397
MDVSA-2011:194
http://www.mandriva.com/security/advisories?name=MDVSA-2011:194
RHSA-2011:1815
http://rhn.redhat.com/errata/RHSA-2011-1815.html
USN-1348-1
http://ubuntu.com/usn/usn-1348-1
[oss-security] 20111209 CVE Request: icu out of bounds access
http://www.openwall.com/lists/oss-security/2011/12/09/2
[oss-security] 20111209 Re: CVE Request: icu out of bounds access
http://www.openwall.com/lists/oss-security/2011/12/09/5
http://bugs.icu-project.org/trac/ticket/8984
http://code.google.com/p/chromium/issues/detail?id=106441
http://support.apple.com/kb/HT5501
http://support.apple.com/kb/HT5503
icu-canonicalize-bo(71726)
https://exchange.xforce.ibmcloud.com/vulnerabilities/71726
openSUSE-SU-2012:0100
http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html
CopyrightCopyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.