ID de Prueba:	1.3.6.1.4.1.25623.1.0.70809
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201201-08 (FontForge)
Resumen:	The remote host is missing updates announced in;advisory GLSA 201201-08.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 201201-08. Vulnerability Insight: A stack-based buffer overflow flaw in FontForge could result in execution of arbitrary code or a Denial of Service. Solution: All FontForge users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-gfx/fontforge-20110222-r1' NOTE: This is a legacy GLSA. Updates for all affected architectures are available since October 12, 2011. It is likely that your system is already no longer affected by this issue. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4259 15732 http://www.exploit-db.com/exploits/15732 42577 http://secunia.com/advisories/42577 45162 http://www.securityfocus.com/bid/45162 ADV-2010-3200 http://www.vupen.com/english/advisories/2010/3200 DSA-2253 http://www.debian.org/security/2011/dsa-2253 FEDORA-2010-18573 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html FEDORA-2010-18577 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html [oss-security] 20101202 CVE Request -- FontForge: Stack-based buffer overflow by processing specially-crafted CHARSET_REGISTRY font file header http://openwall.com/lists/oss-security/2010/12/02/5 [oss-security] 20101202 Re: CVE Request -- FontForge: Stack-based buffer overflow by processing specially-crafted CHARSET_REGISTRY font file header http://openwall.com/lists/oss-security/2010/12/02/8 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605537 https://bugzilla.redhat.com/show_bug.cgi?id=659359
Copyright	Copyright (C) 2012 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.