Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.58029
Kategorie:Turbolinux Local Security Tests
Titel:Turbolinux TLSA-2007-4 (xpdf)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:

The remote host is missing an update to xpdf
announced via advisory TLSA-2007-4.

Xpdf is an X Window System based viewer for Portable Document Format (PDF) files.

The xpdf contains a vulnerability that can cause denial of service (infinite loop)
via a crafted PDF file.

This vulnerability may allow remote attackers to execute arbitrary
code, denial of service (infinite loop) or memory corruption via crafted pdf files.

Solution: Please use the turbopkg (zabom) tool to apply the update.
http://www.securityspace.com/smysecure/catid.html?in=TLSA-2007-4

Risk factor : High

CVSS Score:
6.8

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2007-0104
BugTraq ID: 21910
http://www.securityfocus.com/bid/21910
Bugtraq: 20070116 [KDE Security Advisory] kpdf/kword/xpdf denial of service vulnerability (Google Search)
http://www.securityfocus.com/archive/1/457055/100/0/threaded
Cert/CC Advisory: TA07-072A
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
http://www.mandriva.com/security/advisories?name=MDKSA-2007:018
http://www.mandriva.com/security/advisories?name=MDKSA-2007:019
http://www.mandriva.com/security/advisories?name=MDKSA-2007:020
http://www.mandriva.com/security/advisories?name=MDKSA-2007:021
http://www.mandriva.com/security/advisories?name=MDKSA-2007:022
http://www.mandriva.com/security/advisories?name=MDKSA-2007:024
http://projects.info-pull.com/moab/MOAB-06-01-2007.html
http://securitytracker.com/id?1017514
http://www.securitytracker.com/id?1017749
http://secunia.com/advisories/23791
http://secunia.com/advisories/23799
http://secunia.com/advisories/23808
http://secunia.com/advisories/23813
http://secunia.com/advisories/23815
http://secunia.com/advisories/23839
http://secunia.com/advisories/23844
http://secunia.com/advisories/23876
http://secunia.com/advisories/24204
http://secunia.com/advisories/24479
SuSE Security Announcement: SUSE-SR:2007:003 (Google Search)
http://www.novell.com/linux/security/advisories/2007_3_sr.html
http://www.ubuntu.com/usn/usn-410-1
http://www.ubuntu.com/usn/usn-410-2
http://www.vupen.com/english/advisories/2007/0203
http://www.vupen.com/english/advisories/2007/0212
http://www.vupen.com/english/advisories/2007/0244
http://www.vupen.com/english/advisories/2007/0930
XForce ISS Database: multiple-vendor-pdf-code-execution(31364)
https://exchange.xforce.ibmcloud.com/vulnerabilities/31364
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.