ID de Prueba:	1.3.6.1.4.1.25623.1.0.63357
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: amaya
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: amaya CVE-2008-5282 Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute. CVE-2009-0323 Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function, (2) an 'HTML GI' in a start tag, which is not properly handled by the ProcessStartGI function, and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable. NOTE: these are different vectors than CVE-2008-6005. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5282 BugTraq ID: 32442 http://www.securityfocus.com/bid/32442 Bugtraq: 20081124 Amaya (URL Bar) Remote Stack Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/498578/100/0/threaded Bugtraq: 20081124 Amaya (id) Remote Stack Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/498583/100/0/threaded http://www.bmgsec.com.au/advisory/40/ http://www.bmgsec.com.au/advisory/41/ http://osvdb.org/50282 http://osvdb.org/50283 http://secunia.com/advisories/32848 http://securityreason.com/securityalert/4657 http://www.vupen.com/english/advisories/2008/3255 Common Vulnerability Exposure (CVE) ID: CVE-2009-0323 Bugtraq: 20090128 CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/500492/100/0/threaded https://www.exploit-db.com/exploits/7902 http://www.coresecurity.com/content/amaya-buffer-overflows XForce ISS Database: amaya-html-tags-bo(48325) https://exchange.xforce.ibmcloud.com/vulnerabilities/48325
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.