Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.703163
Categoría:Debian Local Security Checks
Título:Debian Security Advisory DSA 3163-1 (libreoffice - security update)
Resumen:It was discovered that LibreOffice,;an office productivity suite, could try to write to invalid memory areas when;importing malformed RTF files. This could allow remote attackers to cause a;denial of service (crash) or arbitrary code execution via crafted RTF files.
Descripción:Summary:
It was discovered that LibreOffice,
an office productivity suite, could try to write to invalid memory areas when
importing malformed RTF files. This could allow remote attackers to cause a
denial of service (crash) or arbitrary code execution via crafted RTF files.

Affected Software/OS:
libreoffice on Debian Linux

Solution:
For the stable distribution (wheezy),
this problem has been fixed in version 1:3.5.4+dfsg2-0+deb7u3.

For the upcoming stable distribution (jessie), this problem has been
fixed in version 1:4.3.3-2.

For the unstable distribution (sid), this problem has been fixed in
version 1:4.3.3-2.

We recommend that you upgrade your libreoffice packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2014-9093
Debian Security Information: DSA-3163 (Google Search)
http://www.debian.org/security/2015/dsa-3163
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144836.html
https://security.gentoo.org/glsa/201603-05
http://www.openwall.com/lists/oss-security/2014/11/19/3
http://www.openwall.com/lists/oss-security/2014/11/26/7
http://www.ubuntu.com/usn/USN-2578-1
CopyrightCopyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.