ID de Prueba:	1.3.6.1.4.1.25623.1.0.72457
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201209-23 (gimp)
Resumen:	The remote host is missing updates announced in;advisory GLSA 201209-23.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 201209-23. Vulnerability Insight: Multiple vulnerabilities have been found in GIMP, the worst of which allow execution of arbitrary code or Denial of Service. Solution: All GIMP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=media-gfx/gimp-2.6.12-r2' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1570 BugTraq ID: 37006 http://www.securityfocus.com/bid/37006 Bugtraq: 20091112 Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/507813/100/0/threaded http://security.gentoo.org/glsa/glsa-201209-23.xml http://secunia.com/secunia_research/2009-42/ https://bugzilla.gnome.org/show_bug.cgi?id=600484 http://www.osvdb.org/59930 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290 http://www.redhat.com/support/errata/RHSA-2011-0837.html http://www.redhat.com/support/errata/RHSA-2011-0838.html http://secunia.com/advisories/37232 http://secunia.com/advisories/50737 SuSE Security Announcement: SUSE-SR:2010:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html http://www.vupen.com/english/advisories/2009/3228 http://www.vupen.com/english/advisories/2009/3564 http://www.vupen.com/english/advisories/2010/1021 XForce ISS Database: gimp-readimage-bo(54254) https://exchange.xforce.ibmcloud.com/vulnerabilities/54254 Common Vulnerability Exposure (CVE) ID: CVE-2009-3909 BugTraq ID: 37040 http://www.securityfocus.com/bid/37040 Bugtraq: 20091117 Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/507928/100/0/threaded Debian Security Information: DSA-1941 (Google Search) http://www.debian.org/security/2009/dsa-1941 http://www.mandriva.com/security/advisories?name=MDVSA-2009:332 http://secunia.com/secunia_research/2009-43/ https://bugzilla.gnome.org/show_bug.cgi?id=600741 http://osvdb.org/60178 RedHat Security Advisories: RHSA-2012:1181 http://rhn.redhat.com/errata/RHSA-2012-1181.html http://secunia.com/advisories/37348 http://www.vupen.com/english/advisories/2009/3270 Common Vulnerability Exposure (CVE) ID: CVE-2010-4540 42771 http://secunia.com/advisories/42771 44750 http://secunia.com/advisories/44750 48236 http://secunia.com/advisories/48236 50737 70282 http://osvdb.org/70282 ADV-2011-0016 http://www.vupen.com/english/advisories/2011/0016 DSA-2426 http://www.debian.org/security/2012/dsa-2426 GLSA-201209-23 MDVSA-2011:103 http://www.mandriva.com/security/advisories?name=MDVSA-2011:103 RHSA-2011:0838 RHSA-2011:0839 http://www.redhat.com/support/errata/RHSA-2011-0839.html SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html [oss-security] 20110103 CVE request for buffer overflows in gimp http://openwall.com/lists/oss-security/2011/01/03/2 [oss-security] 20110104 Re: CVE request for buffer overflows in gimp http://openwall.com/lists/oss-security/2011/01/04/7 gimp-lightning-effects-bo(64582) https://exchange.xforce.ibmcloud.com/vulnerabilities/64582 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 https://bugzilla.redhat.com/show_bug.cgi?id=666793 Common Vulnerability Exposure (CVE) ID: CVE-2010-4541 70281 http://osvdb.org/70281 RHSA-2011:0837 gimp-sphere-designer-bo(64581) https://exchange.xforce.ibmcloud.com/vulnerabilities/64581 Common Vulnerability Exposure (CVE) ID: CVE-2010-4542 70283 http://osvdb.org/70283 Common Vulnerability Exposure (CVE) ID: CVE-2010-4543 70284 http://osvdb.org/70284 Common Vulnerability Exposure (CVE) ID: CVE-2011-1178 1025586 http://securitytracker.com/id?1025586 48057 http://www.securityfocus.com/bid/48057 MDVSA-2011:110 http://www.mandriva.com/security/advisories?name=MDVSA-2011:110 gimp-pcximage-bo(67787) https://exchange.xforce.ibmcloud.com/vulnerabilities/67787 http://git.gnome.org/browse/gimp/commit/?id=a9671395f6573e90316a9d748588c5435216f6ce https://bugzilla.redhat.com/show_bug.cgi?id=689831 Common Vulnerability Exposure (CVE) ID: CVE-2011-2896 1025929 http://www.securitytracker.com/id?1025929 45621 http://secunia.com/advisories/45621 45900 http://secunia.com/advisories/45900 45945 http://secunia.com/advisories/45945 45948 http://secunia.com/advisories/45948 46024 http://secunia.com/advisories/46024 48308 http://secunia.com/advisories/48308 49148 http://www.securityfocus.com/bid/49148 DSA-2354 http://www.debian.org/security/2011/dsa-2354 FEDORA-2011-11173 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064873.html FEDORA-2011-11197 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064600.html FEDORA-2011-11221 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065550.html FEDORA-2011-11229 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065651.html FEDORA-2011-11305 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065527.html FEDORA-2011-11318 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065539.html MDVSA-2011:146 http://www.mandriva.com/security/advisories?name=MDVSA-2011:146 MDVSA-2011:167 http://www.mandriva.com/security/advisories?name=MDVSA-2011:167 RHSA-2011:1635 http://www.redhat.com/support/errata/RHSA-2011-1635.html RHSA-2012:1180 http://rhn.redhat.com/errata/RHSA-2012-1180.html RHSA-2012:1181 USN-1207-1 http://www.ubuntu.com/usn/USN-1207-1 USN-1214-1 http://www.ubuntu.com/usn/USN-1214-1 [oss-security] 20110810 LZW decompression issues http://www.openwall.com/lists/oss-security/2011/08/10/10 http://cups.org/str.php?L3867 http://git.gnome.org/browse/gimp/commit/?id=376ad788c1a1c31d40f18494889c383f6909ebfc http://www.swi-prolog.org/bugzilla/show_bug.cgi?id=7#c4 https://bugzilla.redhat.com/show_bug.cgi?id=727800 https://bugzilla.redhat.com/show_bug.cgi?id=730338 Common Vulnerability Exposure (CVE) ID: CVE-2012-2763 http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html http://www.openwall.com/lists/oss-security/2012/05/31/1 http://www.openwall.com/lists/oss-security/2012/07/01/1 SuSE Security Announcement: openSUSE-SU-2012:1080 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html SuSE Security Announcement: openSUSE-SU-2012:1131 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00043.html Common Vulnerability Exposure (CVE) ID: CVE-2012-3402 1027411 http://www.securitytracker.com/id?1027411 [oss-security] 20120820 The Gimp PSD plug-in CVE-2012-3402 issue http://www.openwall.com/lists/oss-security/2012/08/20/6 https://bugzilla.redhat.com/attachment.cgi?id=603059&action=diff https://bugzilla.redhat.com/show_bug.cgi?id=838941
Copyright	Copyright (C) 2012 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.