Test Kennung:	1.3.6.1.4.1.25623.1.0.66089
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2009:286 (ocaml-camlimages)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to ocaml-camlimages announced via advisory MDVSA-2009:286. Multiple vulnerabilities has been found and corrected in ocaml-camlimages: Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function (CVE-2009-2295). Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295 (CVE-2009-2660). Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows (CVE-2009-3296). This update fixes these vulnerabilities. Affected: Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2009:286 CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2295 BugTraq ID: 35556 http://www.securityfocus.com/bid/35556 Bugtraq: 20090702 [oCERT-2009-009] CamlImages integer overflows (Google Search) http://www.securityfocus.com/archive/1/504696/100/0/threaded Debian Security Information: DSA-1832 (Google Search) http://www.debian.org/security/2009/dsa-1832 http://www.ocert.org/advisories/ocert-2009-009.html http://secunia.com/advisories/35819 http://www.vupen.com/english/advisories/2009/1874 Common Vulnerability Exposure (CVE) ID: CVE-2009-2660 BugTraq ID: 35999 http://www.securityfocus.com/bid/35999 Debian Security Information: DSA-1857 (Google Search) http://www.debian.org/security/2009/dsa-1857 Debian Security Information: DSA-1912 (Google Search) http://www.debian.org/security/2009/dsa-1912 http://www.openwall.com/lists/oss-security/2009/07/25/2 http://secunia.com/advisories/37067 XForce ISS Database: camlimages-gifread-jpegread-bo(52649) https://exchange.xforce.ibmcloud.com/vulnerabilities/52649 Common Vulnerability Exposure (CVE) ID: CVE-2009-3296 BugTraq ID: 36713 http://www.securityfocus.com/bid/36713
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.