Test Kennung:	1.3.6.1.4.1.25623.1.0.66153
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: gd
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: gd php5-gd php4-gd CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.0, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information. Solution: Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/37069 http://secunia.com/advisories/37080 http://www.vuxml.org/freebsd/4e8344a3-ca52-11de-8ee8-00215c6a37bb.html CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 36712 Common Vulnerability Exposure (CVE) ID: CVE-2009-3546 http://www.securityfocus.com/bid/36712 http://www.mandriva.com/security/advisories?name=MDVSA-2009:285 http://marc.info/?l=oss-security&m=125562113503923&w=2 http://www.openwall.com/lists/oss-security/2009/11/20/5 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199 http://www.redhat.com/support/errata/RHSA-2010-0003.html http://secunia.com/advisories/37069 http://secunia.com/advisories/37080 http://secunia.com/advisories/38055 http://www.vupen.com/english/advisories/2009/2929 http://www.vupen.com/english/advisories/2009/2930
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.