Test Kennung:	1.3.6.1.4.1.25623.1.0.60237
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2008:006 (exiv2)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to exiv2 announced via advisory MDVSA-2008:006. An integer overflow in the Exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. The updated packages have been patched to correct these issues. Affected: 2007.1, 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:006 Risk factor : High CVSS Score: 7.5
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6353 BugTraq ID: 26918 http://www.securityfocus.com/bid/26918 Debian Security Information: DSA-1474 (Google Search) http://www.debian.org/security/2008/dsa-1474 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00674.html https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00652.html http://security.gentoo.org/glsa/glsa-200712-16.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:006 http://bugs.gentoo.org/show_bug.cgi?id=202351 http://secunia.com/advisories/28132 http://secunia.com/advisories/28178 http://secunia.com/advisories/28267 http://secunia.com/advisories/28412 http://secunia.com/advisories/28610 http://secunia.com/advisories/32273 SuSE Security Announcement: SUSE-SR:2008:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html http://www.ubuntu.com/usn/usn-655-1 http://www.vupen.com/english/advisories/2007/4252 XForce ISS Database: exiv2-setdataarea-bo(39118) https://exchange.xforce.ibmcloud.com/vulnerabilities/39118
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.