Test ID:	1.3.6.1.4.1.25623.1.0.57590
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1215)
Summary:	The remote host is missing an update for the Debian 'xine-lib' package(s) announced via the DSA-1215 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'xine-lib' package(s) announced via the DSA-1215 advisory. Vulnerability Insight: Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-4799 The XFocus Security Team discovered that insufficient validation of AVI headers may lead to the execution of arbitrary code. CVE-2006-4800 Michael Niedermayer discovered that a buffer overflow in the 4XM codec may lead to the execution of arbitrary code. For the stable distribution (sarge) these problems have been fixed in version 1.0.1-1sarge4. For the upcoming stable distribution (etch) these problems have been fixed in version 1.1.2-1. For the unstable distribution (sid) these problems have been fixed in version 1.1.2-1. We recommend that you upgrade your xine-lib packages. Affected Software/OS: 'xine-lib' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4799 Debian Security Information: DSA-1215 (Google Search) http://www.us.debian.org/security/2006/dsa-1215 http://www.gentoo.org/security/en/glsa/glsa-200609-09.xml http://secunia.com/advisories/22230 http://secunia.com/advisories/23010 http://secunia.com/advisories/23213 SuSE Security Announcement: SUSE-SA:2006:073 (Google Search) http://www.novell.com/linux/security/advisories/2006_73_mono.html http://www.ubuntu.com/usn/usn-358-1 Common Vulnerability Exposure (CVE) ID: CVE-2006-4800 BugTraq ID: 20009 http://www.securityfocus.com/bid/20009 http://security.gentoo.org/glsa/glsa-200609-09.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:173 http://www.mandriva.com/security/advisories?name=MDKSA-2006:174 http://www.mandriva.com/security/advisories?name=MDKSA-2006:175 http://www.mandriva.com/security/advisories?name=MDKSA-2006:176 http://bugs.gentoo.org/show_bug.cgi?id=133520 http://secunia.com/advisories/21921 http://secunia.com/advisories/22180 http://secunia.com/advisories/22181 http://secunia.com/advisories/22182 http://secunia.com/advisories/22198 http://secunia.com/advisories/22200 http://secunia.com/advisories/22201 http://secunia.com/advisories/22202 http://secunia.com/advisories/22203
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.