Test ID:	1.3.6.1.4.1.25623.1.0.61875
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: faad2
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: faad2 CVE-2008-4201 Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4201 BugTraq ID: 31219 http://www.securityfocus.com/bid/31219 http://security.gentoo.org/glsa/glsa-200811-03.xml http://bugs.gentoo.org/attachment.cgi?id=166174&action=view http://www.openwall.com/lists/oss-security/2008/09/24/6 http://osvdb.org/48349 http://secunia.com/advisories/32006 http://secunia.com/advisories/32661 http://www.vupen.com/english/advisories/2008/2601
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.