| |||||||||||||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.53453 |
| Categoría: | Debian Local Security Checks |
| Título: | Debian Security Advisory DSA 213-1 (libpng, libpng3) |
| Resumen: | Debian Security Advisory DSA 213-1 (libpng, libpng3) |
| Descripción: | The remote host is missing an update to libpng, libpng3 announced via advisory DSA 213-1. Glenn Randers-Pehrson discovered a problem in connection with 16-bit samples from libpng, an interface for reading and writing PNG (Portable Network Graphics) format files. The starting offsets for the loops are calculated incorrectly which causes a buffer overrun beyond the beginning of the row buffer. For the current stable distribution (woody) this problem has been fixed in version 1.0.12-3.woody.3 for libpng and in version 1.2.1-1.1.woody.3 for libpng3. For the old stable distribution (potato) this problem has been fixed in version 1.0.5-1.1 for libpng. There are no other libpng packages. For the unstable distribution (sid) this problem has been fixed in version 1.0.12-7 for libpng and in version 1.2.5-8 for libpng3. We recommend that you upgrade your libpng packages. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%20213-1 |
| Referencia Cruzada: |
BugTraq ID: 6431 Common Vulnerability Exposure (CVE) ID: CVE-2002-1363 Debian Security Information: DSA-213 (Google Search) http://www.debian.org/security/2002/dsa-213 https://bugzilla.fedora.us/show_bug.cgi?id=1943 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063 http://www.redhat.com/support/errata/RHSA-2003-006.html http://www.redhat.com/support/errata/RHSA-2003-007.html http://www.redhat.com/support/errata/RHSA-2003-119.html http://www.redhat.com/support/errata/RHSA-2003-157.html http://www.redhat.com/support/errata/RHSA-2004-249.html http://www.redhat.com/support/errata/RHSA-2004-402.html SuSE Security Announcement: SUSE-SA:2003:0004 (Google Search) http://www.novell.com/linux/security/advisories/2003_004_libpng.html http://www.securityfocus.com/bid/6431 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3657 XForce ISS Database: libpng-file-offset-bo(10925) http://xforce.iss.net/xforce/xfdb/10925 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Esta es sólo una de 32582 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |
|