Test Kennung:	1.3.6.1.4.1.25623.1.0.59034
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2007:200 (tk)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to tk announced via advisory MDKSA-2007:200. A vulnerablity in Tk was found that could be used to overrun a buffer when loading certain GIF images. If a user were tricked into opening a specially crafted GIF file, it could lead to a denial of service condition or possibly the execution of arbitrary code with the user's privileges. Updated packages have been patched to prevent this issue. Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:200 Risk factor : High CVSS Score: 6.8
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5137 BugTraq ID: 25826 http://www.securityfocus.com/bid/25826 Debian Security Information: DSA-1743 (Google Search) http://www.debian.org/security/2009/dsa-1743 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00261.html http://security.gentoo.org/glsa/glsa-200710-07.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:200 http://bugs.gentoo.org/show_bug.cgi?id=192539 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9540 http://www.redhat.com/support/errata/RHSA-2008-0136.html http://secunia.com/advisories/26942 http://secunia.com/advisories/27086 http://secunia.com/advisories/27182 http://secunia.com/advisories/27207 http://secunia.com/advisories/27229 http://secunia.com/advisories/27295 http://secunia.com/advisories/29069 http://secunia.com/advisories/34297 SuSE Security Announcement: SUSE-SR:2007:020 (Google Search) http://www.novell.com/linux/security/advisories/2007_20_sr.html http://www.ubuntu.com/usn/usn-529-1 http://www.attrition.org/pipermail/vim/2007-October/001826.html Common Vulnerability Exposure (CVE) ID: CVE-2007-5378 BugTraq ID: 26056 http://www.securityfocus.com/bid/26056 Bugtraq: 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues (Google Search) http://www.securityfocus.com/archive/1/493080/100/0/threaded Debian Security Information: DSA-1415 (Google Search) http://www.debian.org/security/2007/dsa-1415 Debian Security Information: DSA-1416 (Google Search) http://www.debian.org/security/2007/dsa-1416 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9480 http://www.redhat.com/support/errata/RHSA-2008-0134.html http://www.redhat.com/support/errata/RHSA-2008-0135.html http://secunia.com/advisories/27801 http://secunia.com/advisories/27806 http://secunia.com/advisories/29070 http://secunia.com/advisories/30129 http://secunia.com/advisories/30535 http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1 http://www.vupen.com/english/advisories/2008/1456/references http://www.vupen.com/english/advisories/2008/1744 XForce ISS Database: tktoolkit-filereadgif-dos(37189) https://exchange.xforce.ibmcloud.com/vulnerabilities/37189
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.