ID de Prueba:	1.3.6.1.4.1.25623.1.0.870674
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for gimp RHSA-2011:0839-01
Resumen:	The remote host is missing an update for the 'gimp'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'gimp' package(s) announced via the referenced advisory. Vulnerability Insight: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. A heap-based buffer overflow flaw was found in the GIMP's Paint Shop Pro (PSP) image file plug-in. An attacker could create a specially-crafted PSP image file that, when opened, could cause the PSP plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP. (CVE-2010-4543) A stack-based buffer overflow flaw was found in the GIMP's Lightning, Sphere Designer, and Gfig image filters. An attacker could create a specially-crafted Lightning, Sphere Designer, or Gfig filter configuration file that, when opened, could cause the relevant plug-in to crash or, potentially, execute arbitrary code with the privileges of the user running the GIMP. (CVE-2010-4540, CVE-2010-4541, CVE-2010-4542) Users of the GIMP are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The GIMP must be restarted for the update to take effect. Affected Software/OS: gimp on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4540 42771 http://secunia.com/advisories/42771 44750 http://secunia.com/advisories/44750 48236 http://secunia.com/advisories/48236 50737 http://secunia.com/advisories/50737 70282 http://osvdb.org/70282 ADV-2011-0016 http://www.vupen.com/english/advisories/2011/0016 DSA-2426 http://www.debian.org/security/2012/dsa-2426 GLSA-201209-23 http://security.gentoo.org/glsa/glsa-201209-23.xml MDVSA-2011:103 http://www.mandriva.com/security/advisories?name=MDVSA-2011:103 RHSA-2011:0838 http://www.redhat.com/support/errata/RHSA-2011-0838.html RHSA-2011:0839 http://www.redhat.com/support/errata/RHSA-2011-0839.html SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html [oss-security] 20110103 CVE request for buffer overflows in gimp http://openwall.com/lists/oss-security/2011/01/03/2 [oss-security] 20110104 Re: CVE request for buffer overflows in gimp http://openwall.com/lists/oss-security/2011/01/04/7 gimp-lightning-effects-bo(64582) https://exchange.xforce.ibmcloud.com/vulnerabilities/64582 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 https://bugzilla.redhat.com/show_bug.cgi?id=666793 Common Vulnerability Exposure (CVE) ID: CVE-2010-4541 70281 http://osvdb.org/70281 RHSA-2011:0837 http://www.redhat.com/support/errata/RHSA-2011-0837.html gimp-sphere-designer-bo(64581) https://exchange.xforce.ibmcloud.com/vulnerabilities/64581 Common Vulnerability Exposure (CVE) ID: CVE-2010-4542 70283 http://osvdb.org/70283 Common Vulnerability Exposure (CVE) ID: CVE-2010-4543 70284 http://osvdb.org/70284
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.