ID de Prueba:	1.3.6.1.4.1.25623.1.0.58077
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0010
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0010. KOffice is a collection of productivity applications for the K Desktop Environment (KDE) GUI desktop. An integer overflow bug was found in KOffice's PPT file processor. An attacker could create a malicious PPT file that could cause KOffice to execute arbitrary code if the file was opened by a victim. (CVE-2006-6120) All users of KOffice are advised to upgrade to these updated packages, which contains a backported patch to correct this issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0010.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.8
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6120 BugTraq ID: 21354 http://www.securityfocus.com/bid/21354 Bugtraq: 20061205 [KOffice security advisory] KOffice OLEfilter integer overflow (Google Search) http://www.securityfocus.com/archive/1/453550/100/0/threaded http://security.gentoo.org/glsa/glsa-200612-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:222 http://websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc?rev=607037&r1=566347&r2=607037 http://www.redhat.com/support/errata/RHSA-2007-0010.html http://securitytracker.com/id?1017318 http://secunia.com/advisories/23143 http://secunia.com/advisories/23162 http://secunia.com/advisories/23220 http://secunia.com/advisories/23409 http://secunia.com/advisories/24218 SuSE Security Announcement: SUSE-SR:2006:029 (Google Search) http://www.novell.com/linux/security/advisories/2006_29_sr.html http://www.ubuntu.com/usn/usn-388-1 http://www.vupen.com/english/advisories/2006/4771 XForce ISS Database: koffice-readbigblockdepot-overflow(30624) https://exchange.xforce.ibmcloud.com/vulnerabilities/30624
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.