ID de Prueba:	1.3.6.1.4.1.25623.1.0.703392
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 3392-1 (freeimage - security update)
Resumen:	Pengsu Cheng discovered that FreeImage,;a library for graphic image formats, contained multiple integer underflows that;could lead to a denial of service: remote attackers were able to trigger a crash by;supplying a specially crafted image.
Descripción:	Summary: Pengsu Cheng discovered that FreeImage, a library for graphic image formats, contained multiple integer underflows that could lead to a denial of service: remote attackers were able to trigger a crash by supplying a specially crafted image. Affected Software/OS: freeimage on Debian Linux Solution: For the oldstable distribution (wheezy), this problem has been fixed in version 3.15.1-1.1. For the stable distribution (jessie), this problem has been fixed in version 3.15.4-4.2. For the testing distribution (stretch) and unstable distribution (sid), this problem has been fixed in version 3.15.4-6. We recommend that you upgrade your freeimage packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0852 Debian Security Information: DSA-3392 (Google Search) http://www.debian.org/security/2015/dsa-3392 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168023.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168000.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167766.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172583.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172491.html https://security.gentoo.org/glsa/201701-68 http://www.openwall.com/lists/oss-security/2015/08/28/1 http://www.securitytracker.com/id/1034077
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.