ID de Prueba:	1.3.6.1.4.1.25623.1.0.56627
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200604-10 (xzgv)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200604-10.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200604-10. Vulnerability Insight: xzgv and zgv attempt to decode JPEG images within the CMYK/YCCK colour space incorrectly, potentially resulting in the execution of arbitrary code. Solution: All xzgv users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-gfx/xzgv-0.8-r2' All zgv users should also upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-gfx/zgv-5.8' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1060 BugTraq ID: 17409 http://www.securityfocus.com/bid/17409 Debian Security Information: DSA-1037 (Google Search) http://www.debian.org/security/2006/dsa-1037 Debian Security Information: DSA-1038 (Google Search) http://www.debian.org/security/2006/dsa-1038 http://secunia.com/advisories/19571 http://secunia.com/advisories/19572 http://secunia.com/advisories/19731 http://secunia.com/advisories/19757 http://secunia.com/advisories/19779 http://secunia.com/advisories/19790 http://securityreason.com/securityalert/756 SuSE Security Announcement: SUSE-SR:2006:008 (Google Search) http://www.novell.com/linux/security/advisories/2006_08_sr.html http://www.vupen.com/english/advisories/2006/1288 XForce ISS Database: xzgv-jpeg-bo(25718) https://exchange.xforce.ibmcloud.com/vulnerabilities/25718
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.