Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.57706
Categoría:Mandrake Local Security Checks
Título:Mandrake Security Advisory MDKSA-2006:227 (kdegraphics)
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing an update to kdegraphics
announced via advisory MDKSA-2006:227.

Stack overflow in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics3,
as used by konqueror, digikam, and other KDE image browsers, allows
remote attackers to cause a denial of service (stack consumption) via a
crafted EXIF section in a JPEG file, which results in an infinite
recursion.

The updated packages have been patched to correct this issue.

Affected: 2007.0, Corporate 3.0, Corporate 4.0

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:227

Risk factor : Medium

CVSS Score:
5.0

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2006-6297
BugTraq ID: 21384
http://www.securityfocus.com/bid/21384
http://security.gentoo.org/glsa/glsa-200701-05.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:227
http://securitytracker.com/id?1017325
http://secunia.com/advisories/23203
http://secunia.com/advisories/23213
http://secunia.com/advisories/23300
http://secunia.com/advisories/23728
SuSE Security Announcement: SUSE-SA:2006:073 (Google Search)
http://www.novell.com/linux/security/advisories/2006_73_mono.html
http://www.vupen.com/english/advisories/2006/4810
CopyrightCopyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.