Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.840800
Kategorie:Ubuntu Local Security Checks
Titel:Ubuntu Update for libmodplug USN-1255-1
Zusammenfassung:Ubuntu Update for Linux kernel vulnerabilities USN-1255-1
Beschreibung:Summary:
Ubuntu Update for Linux kernel vulnerabilities USN-1255-1

Vulnerability Insight:
Hossein Lotfi discovered that libmodplug did not correctly handle certain
malformed media files. If a user or automated system were tricked into
opening a crafted media file, an attacker could cause a denial of service
or possibly execute arbitrary code with privileges of the user invoking the
program. (CVE-2011-2911, CVE-2011-2912, CVE-2011-2913)

It was discovered that libmodplug did not correctly handle certain
malformed media files. If a user or automated system were tricked into
opening a crafted media file, an attacker could cause a denial of service
or possibly execute arbitrary code with privileges of the user invoking the
program. (CVE-2011-2914, CVE-2011-2915)

Affected Software/OS:
libmodplug on Ubuntu 11.04,
Ubuntu 10.10,
Ubuntu 10.04 LTS

Solution:
Please Install the Updated Packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-2911
BugTraq ID: 48979
http://www.securityfocus.com/bid/48979
Debian Security Information: DSA-2415 (Google Search)
http://www.debian.org/security/2012/dsa-2415
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html
http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml
http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml
http://www.openwall.com/lists/oss-security/2011/08/10/4
http://www.openwall.com/lists/oss-security/2011/08/12/4
http://www.osvdb.org/74208
RedHat Security Advisories: RHSA-2011:1264
http://rhn.redhat.com/errata/RHSA-2011-1264.html
http://secunia.com/advisories/45131
http://secunia.com/advisories/45658
http://secunia.com/advisories/45742
http://secunia.com/advisories/45901
http://secunia.com/advisories/46032
http://secunia.com/advisories/46043
http://secunia.com/advisories/46793
http://secunia.com/advisories/48058
http://secunia.com/advisories/48434
http://secunia.com/advisories/48439
SuSE Security Announcement: openSUSE-SU-2011:0943 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
http://ubuntu.com/usn/usn-1255-1
XForce ISS Database: libmodplug-wav-bo(68983)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68983
Common Vulnerability Exposure (CVE) ID: CVE-2011-2912
http://www.osvdb.org/74209
XForce ISS Database: libmodplug-s3m-bo(68984)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68984
Common Vulnerability Exposure (CVE) ID: CVE-2011-2913
http://www.osvdb.org/74210
XForce ISS Database: libmodplug-ams-code-execution(68985)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68985
Common Vulnerability Exposure (CVE) ID: CVE-2011-2914
http://www.osvdb.org/74211
XForce ISS Database: libmodplug-dsm-code-execution(68986)
Common Vulnerability Exposure (CVE) ID: CVE-2011-2915
XForce ISS Database: libmodplug-csoundfile-code-exec(68987)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68987
CopyrightCopyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.