ID de Prueba:	1.3.6.1.4.1.25623.1.0.51172
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2004:465
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2004:465. Imlib is an image loading and rendering library. Several heap overflow flaws were found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it could cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0817 to this issue. Users of imlib should update to this updated package which contains backported patches and is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-465.html http://bugzilla.gnome.org/show_bug.cgi?id=151034 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	BugTraq ID: 11084 Common Vulnerability Exposure (CVE) ID: CVE-2004-0817 http://www.securityfocus.com/bid/11084 Conectiva Linux advisory: CLA-2004:870 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Debian Security Information: DSA-548 (Google Search) http://www.debian.org/security/2004/dsa-548 http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:089 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843 http://www.redhat.com/support/errata/RHSA-2004-465.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 XForce ISS Database: imlib-bmp-bo(17182) https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.