ID de Prueba:	1.3.6.1.4.1.25623.1.0.831710
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Update for icedtea-web MDVSA-2012:122 (icedtea-web)
Resumen:	The remote host is missing an update for the 'icedtea-web'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'icedtea-web' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been discovered and corrected in icedtea-web: An uninitialized pointer use flaw was found in IcedTea-Web web browser plugin. A malicious web page could use this flaw make IcedTea-Web browser plugin pass invalid pointer to a web browser. Depending on the browser used, it may cause the browser to crash or possibly execute arbitrary code (CVE-2012-3422). It was discovered that the IcedTea-Web web browser plugin incorrectly assumed that all strings provided by browser are NUL terminated, which is not guaranteed by the NPAPI (Netscape Plugin Application Programming Interface). When used in a browser that does not NUL terminate NPVariant NPStrings, this could lead to buffer over-read or over-write, resulting in possible information leak, crash, or code execution (CVE-2012-3423). The updated packages have been upgraded to the 1.1.6 version which is not affected by these issues. Affected Software/OS: icedtea-web on Mandriva Linux 2011.0, Mandriva Enterprise Server 5.2 Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3422 http://security.gentoo.org/glsa/glsa-201406-32.xml https://bugzilla.redhat.com/show_bug.cgi?id=840592 RedHat Security Advisories: RHSA-2012:1132 http://rhn.redhat.com/errata/RHSA-2012-1132.html http://secunia.com/advisories/50089 SuSE Security Announcement: SUSE-SU-2012:0979 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html SuSE Security Announcement: SUSE-SU-2013:0851 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html SuSE Security Announcement: SUSE-SU-2013:1174 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html SuSE Security Announcement: openSUSE-SU-2012:0981 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html SuSE Security Announcement: openSUSE-SU-2012:0982 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html SuSE Security Announcement: openSUSE-SU-2013:0826 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html SuSE Security Announcement: openSUSE-SU-2013:0893 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html SuSE Security Announcement: openSUSE-SU-2013:0966 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html http://www.ubuntu.com/usn/USN-1521-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-3423 https://bugzilla.redhat.com/show_bug.cgi?id=841345
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.