Test ID:	1.3.6.1.4.1.25623.1.0.840866
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1335-1)
Summary:	The remote host is missing an update for the 't1lib' package(s) announced via the USN-1335-1 advisory.
Description:	Summary: The remote host is missing an update for the 't1lib' package(s) announced via the USN-1335-1 advisory. Vulnerability Insight: Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. (CVE-2010-2642, CVE-2011-0433) Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. (CVE-2011-1552, CVE-2011-1553, CVE-2011-1554) Affected Software/OS: 't1lib' package(s) on Ubuntu 10.04, Ubuntu 10.10, Ubuntu 11.04, Ubuntu 11.10. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2642 BugTraq ID: 45678 http://www.securityfocus.com/bid/45678 Debian Security Information: DSA-2357 (Google Search) http://www.debian.org/security/2011/dsa-2357 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html https://security.gentoo.org/glsa/201701-57 http://lists.mandriva.com/security-announce/2011-01/msg00006.php http://www.mandriva.com/security/advisories?name=MDVSA-2011:016 http://www.mandriva.com/security/advisories?name=MDVSA-2011:017 http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 http://www.redhat.com/support/errata/RHSA-2011-0009.html RedHat Security Advisories: RHSA-2012:1201 http://rhn.redhat.com/errata/RHSA-2012-1201.html http://www.securitytracker.com/id?1024937 http://secunia.com/advisories/42769 http://secunia.com/advisories/42821 http://secunia.com/advisories/42847 http://secunia.com/advisories/42872 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.ubuntu.com/usn/USN-1035-1 http://www.vupen.com/english/advisories/2011/0029 http://www.vupen.com/english/advisories/2011/0043 http://www.vupen.com/english/advisories/2011/0056 http://www.vupen.com/english/advisories/2011/0097 http://www.vupen.com/english/advisories/2011/0102 http://www.vupen.com/english/advisories/2011/0193 http://www.vupen.com/english/advisories/2011/0194 Common Vulnerability Exposure (CVE) ID: CVE-2011-0433 http://xorl.wordpress.com/2011/02/20/cve-2011-0433-evince-linetoken-buffer-overflow/ http://secunia.com/advisories/48985 Common Vulnerability Exposure (CVE) ID: CVE-2011-1552 Bugtraq: 20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution (Google Search) http://www.securityfocus.com/archive/1/517205/100/0/threaded CERT/CC vulnerability note: VU#376500 http://www.kb.cert.org/vuls/id/376500 http://www.toucan-system.com/advisories/tssa-2011-01.txt http://securitytracker.com/id?1025266 http://secunia.com/advisories/43823 http://securityreason.com/securityalert/8171 http://www.vupen.com/english/advisories/2011/0728 Common Vulnerability Exposure (CVE) ID: CVE-2011-1553 Common Vulnerability Exposure (CVE) ID: CVE-2011-1554
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.