ID de Prueba:	1.3.6.1.4.1.25623.1.0.880793
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for libvorbis CESA-2009:1561 centos5 i386
Resumen:	The remote host is missing an update for the 'libvorbis'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'libvorbis' package(s) announced via the referenced advisory. Vulnerability Insight: The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were found in the libvorbis library. A specially-crafted Ogg Vorbis media format file (Ogg) could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened. (CVE-2009-3379) Users of libvorbis should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect. Affected Software/OS: libvorbis on CentOS 5 Solution: Please install the updated packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3379 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 http://www.redhat.com/support/errata/RHSA-2009-1561.html http://secunia.com/advisories/37306 http://secunia.com/advisories/37340 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.ubuntu.com/usn/USN-861-1 http://www.vupen.com/english/advisories/2009/3334
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.