Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.841745
Kategorie:Ubuntu Local Security Checks
Titel:Ubuntu Update for imagemagick USN-2132-1
Zusammenfassung:The remote host is missing an update for the 'imagemagick'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'imagemagick'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Aleksis Kauppinen, Joonas Kuorilehto and Tuomas Parttimaa
discovered that ImageMagick incorrectly handled certain restart markers in
JPEG images. If a user or automated system using ImageMagick were tricked
into opening a specially crafted JPEG image, an attacker could exploit this
to cause memory consumption, resulting in a denial of service. This issue only
affected Ubuntu 12.04 LTS. (CVE-2012-0260)

It was discovered that ImageMagick incorrectly handled decoding certain PSD
images. If a user or automated system using ImageMagick were tricked into
opening a specially crafted PSD image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program. (CVE-2014-1958, CVE-2014-2030)

Affected Software/OS:
imagemagick on Ubuntu 13.10,
Ubuntu 12.10,
Ubuntu 12.04 LTS

Solution:
Please Install the Updated Packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-0260
BugTraq ID: 52898
http://www.securityfocus.com/bid/52898
Debian Security Information: DSA-2462 (Google Search)
http://www.debian.org/security/2012/dsa-2462
http://www.cert.fi/en/reports/2012/vulnerability635606.html
http://www.osvdb.org/81022
RedHat Security Advisories: RHSA-2012:0544
http://rhn.redhat.com/errata/RHSA-2012-0544.html
RedHat Security Advisories: RHSA-2012:0545
http://rhn.redhat.com/errata/RHSA-2012-0545.html
http://www.securitytracker.com/id?1027032
http://secunia.com/advisories/48974
http://secunia.com/advisories/49063
http://secunia.com/advisories/49068
http://secunia.com/advisories/49317
http://secunia.com/advisories/55035
http://secunia.com/advisories/57224
SuSE Security Announcement: openSUSE-SU-2012:0692 (Google Search)
http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html
http://www.ubuntu.com/usn/USN-2132-1
XForce ISS Database: imagemagick-jpegwarninghandler-dos(74658)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74658
Common Vulnerability Exposure (CVE) ID: CVE-2014-1958
http://www.openwall.com/lists/oss-security/2014/02/13/2
http://www.openwall.com/lists/oss-security/2014/02/13/5
https://www.openwall.com/lists/oss-security/2014/02/19/13
Common Vulnerability Exposure (CVE) ID: CVE-2014-2030
http://www.openwall.com/lists/oss-security/2014/02/12/2
http://www.openwall.com/lists/oss-security/2014/02/19/13
https://bugzilla.redhat.com/show_bug.cgi?id=1064098
CopyrightCopyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.