ID de Prueba:	1.3.6.1.4.1.25623.1.0.51366
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2004:870
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2004:870. imlib[1] and imlib2[2] are powerful image loading and rendering libraries. Marcus Meissner noticed that due to improper bounds checking, imlib[3] and imlib2[4] are vulnerable to a buffer overflow when decoding runlength-encoded bitmaps. This bug can be exploited using a specially-crafted BMP image and could potentially allow remote code execution when this image is decoded by the user. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://enlightenment.org/pages/imlib.html http://enlightenment.org/pages/imlib2.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0817 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0802 http://www.securityspace.com/smysecure/catid.html?in=CLA-2004:870 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002004 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0817 BugTraq ID: 11084 http://www.securityfocus.com/bid/11084 Conectiva Linux advisory: CLA-2004:870 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Debian Security Information: DSA-548 (Google Search) http://www.debian.org/security/2004/dsa-548 http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:089 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843 http://www.redhat.com/support/errata/RHSA-2004-465.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 XForce ISS Database: imlib-bmp-bo(17182) https://exchange.xforce.ibmcloud.com/vulnerabilities/17182 Common Vulnerability Exposure (CVE) ID: CVE-2004-0802 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089 http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup XForce ISS Database: imlib2-bmp-bo(17183) https://exchange.xforce.ibmcloud.com/vulnerabilities/17183
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.