Test ID:	1.3.6.1.4.1.25623.1.0.71761
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1367-1 (libpng12-0)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to libpng12-0 announced via advisory USN-1367-1. Details: It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. (CVE-2009-5063) Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the program. (CVE-2011-3026) Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: libpng12-0 1.2.46-3ubuntu1.1 Ubuntu 11.04: libpng12-0 1.2.44-1ubuntu3.2 Ubuntu 10.10: libpng12-0 1.2.44-1ubuntu0.2 Ubuntu 10.04 LTS: libpng12-0 1.2.42-1ubuntu2.3 Ubuntu 8.04 LTS: libpng12-0 1.2.15~ beta5-3ubuntu0.5 http://www.securityspace.com/smysecure/catid.html?in=USN-1367-1 CVSS Score: 7.5 CVSS Vector: AV:L/AC:L/Au:NR/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-5063 http://security.gentoo.org/glsa/glsa-201206-15.xml http://www.openwall.com/lists/oss-security/2011/03/22/7 http://www.openwall.com/lists/oss-security/2011/03/28/6 http://secunia.com/advisories/49660 Common Vulnerability Exposure (CVE) ID: CVE-2011-3026 http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15032 http://secunia.com/advisories/48016 http://secunia.com/advisories/48110 SuSE Security Announcement: SUSE-SU-2012:0303 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html SuSE Security Announcement: openSUSE-SU-2012:0297 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.