Test Kennung:	1.3.6.1.4.1.25623.1.0.831412
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for gimp MDVSA-2011:103 (gimp)
Zusammenfassung:	The remote host is missing an update for the 'gimp'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'gimp' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities was discovered and fixed in gimp: Stack-based buffer overflow in the 'LIGHTING EFFECTS' & 'LIGHT' plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself (CVE-2010-4540). Stack-based buffer overflow in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Number of lights field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself (CVE-2010-4541). Stack-based buffer overflow in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself (CVE-2010-4542). Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image (CVE-2010-4543, CVE-2011-1782). Packages for 2009.0 are provided as of the Extended Maintenance Program. The updated packages have been patched to correct these issues. Affected Software/OS: gimp on Mandriva Linux 2009.0, Mandriva Linux 2009.0/X86_64, Mandriva Linux 2010.1, Mandriva Linux 2010.1/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4540 Debian Security Information: DSA-2426 (Google Search) http://www.debian.org/security/2012/dsa-2426 http://security.gentoo.org/glsa/glsa-201209-23.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:103 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 http://openwall.com/lists/oss-security/2011/01/03/2 http://openwall.com/lists/oss-security/2011/01/04/7 http://osvdb.org/70282 http://www.redhat.com/support/errata/RHSA-2011-0838.html http://www.redhat.com/support/errata/RHSA-2011-0839.html http://secunia.com/advisories/42771 http://secunia.com/advisories/44750 http://secunia.com/advisories/48236 http://secunia.com/advisories/50737 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.vupen.com/english/advisories/2011/0016 XForce ISS Database: gimp-lightning-effects-bo(64582) https://exchange.xforce.ibmcloud.com/vulnerabilities/64582 Common Vulnerability Exposure (CVE) ID: CVE-2010-4541 http://osvdb.org/70281 http://www.redhat.com/support/errata/RHSA-2011-0837.html XForce ISS Database: gimp-sphere-designer-bo(64581) https://exchange.xforce.ibmcloud.com/vulnerabilities/64581 Common Vulnerability Exposure (CVE) ID: CVE-2010-4542 http://osvdb.org/70283 Common Vulnerability Exposure (CVE) ID: CVE-2010-4543 http://osvdb.org/70284 Common Vulnerability Exposure (CVE) ID: CVE-2011-1782
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.