ID de Prueba:	1.3.6.1.4.1.25623.1.0.72144
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2012:123 (libreoffice)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libreoffice announced via advisory MDVSA-2012:123. A Security issue was identified and fixed in libreoffice: Multiple heap-based buffer overflow flaws were found in the XML manifest encryption tag parsing code of LibreOffice. An attacker could create a specially-crafted file in the Open Document Format for Office Applications (ODF) format which when opened could cause arbitrary code execution (CVE-2012-2665). libreoffice for Mandriva Linux 2011 has been upgraded to the 3.5.5 version which is not vulnerable to this issue. Affected: 2011. Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:123 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2665 1027331 http://www.securitytracker.com/id?1027331 1027332 http://www.securitytracker.com/id?1027332 50142 http://secunia.com/advisories/50142 50146 http://secunia.com/advisories/50146 50692 http://secunia.com/advisories/50692 54769 http://www.securityfocus.com/bid/54769 60799 http://secunia.com/advisories/60799 DSA-2520 http://www.debian.org/security/2012/dsa-2520 GLSA-201209-05 http://security.gentoo.org/glsa/glsa-201209-05.xml GLSA-201408-19 http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml RHSA-2012:1135 http://rhn.redhat.com/errata/RHSA-2012-1135.html USN-1536-1 http://www.ubuntu.com/usn/USN-1536-1 USN-1537-1 http://www.ubuntu.com/usn/USN-1537-1 http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/ http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt https://bugzilla.redhat.com/show_bug.cgi?id=826077
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.