Test ID:	1.3.6.1.4.1.25623.1.0.59005
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2007-222-01)
Summary:	The remote host is missing an update for the 'gimp' package(s) announced via the SSA:2007-222-01 advisory.
Description:	Summary: The remote host is missing an update for the 'gimp' package(s) announced via the SSA:2007-222-01 advisory. Vulnerability Insight: New gimp packages are available for Slackware 10.2, 11.0, and 12.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/gimp-2.2.17-i486-1_slack12.0.tgz: Upgraded to gimp-2.2.17, which fixes buffer overflows when decoding certain image types. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'gimp' package(s) on Slackware 10.2, Slackware 11.0, Slackware 12.0. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2949 BugTraq ID: 24745 http://www.securityfocus.com/bid/24745 CERT/CC vulnerability note: VU#399896 http://www.kb.cert.org/vuls/id/399896 Debian Security Information: DSA-1335 (Google Search) http://www.debian.org/security/2007/dsa-1335 http://security.gentoo.org/glsa/glsa-200707-09.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 http://secunia.com/secunia_research/2007-63/advisory/ http://osvdb.org/37804 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11276 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5772 http://www.redhat.com/support/errata/RHSA-2007-0513.html http://secunia.com/advisories/25677 http://secunia.com/advisories/25949 http://secunia.com/advisories/26044 http://secunia.com/advisories/26132 http://secunia.com/advisories/26215 http://secunia.com/advisories/26384 http://secunia.com/advisories/26575 http://secunia.com/advisories/26939 http://secunia.com/advisories/28114 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.360191 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 SuSE Security Announcement: SUSE-SR:2007:015 (Google Search) http://www.novell.com/linux/security/advisories/2007_15_sr.html http://www.ubuntu.com/usn/usn-480-1 http://www.vupen.com/english/advisories/2007/2421 http://www.vupen.com/english/advisories/2007/4241 XForce ISS Database: gimp-unpackpixeldata-code-execution(35246) https://exchange.xforce.ibmcloud.com/vulnerabilities/35246
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.