ID de Prueba:	1.3.6.1.4.1.25623.1.0.58611
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:186 (openoffice.org)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to openoffice.org announced via advisory MDKSA-2007:186. An integer overflow in the TIFF parser in OpenOffice.org prior to version 2.3 allows remote attackers to execute arbitrary code via a TIFF file with crafted values which triggers the allocation of an incorrect amount of memory which results in a heap-based buffer overflow. Updated packages have been patched to prevent this issue. Affected: 2007.0, 2007.1, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2007:186 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2834 BugTraq ID: 25690 http://www.securityfocus.com/bid/25690 Bugtraq: 20070919 FLEA-2007-0056-1 openoffice.org (Google Search) http://www.securityfocus.com/archive/1/479965/100/0/threaded Debian Security Information: DSA-1375 (Google Search) http://www.debian.org/security/2007/dsa-1375 http://fedoranews.org/updates/FEDORA-2007-237.shtml http://fedoranews.org/updates/FEDORA-2007-700.shtml http://security.gentoo.org/glsa/glsa-200710-24.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593 http://www.mandriva.com/security/advisories?name=MDKSA-2007:186 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967 http://www.redhat.com/support/errata/RHSA-2007-0848.html http://securitytracker.com/id?1018702 http://secunia.com/advisories/26816 http://secunia.com/advisories/26817 http://secunia.com/advisories/26839 http://secunia.com/advisories/26844 http://secunia.com/advisories/26855 http://secunia.com/advisories/26861 http://secunia.com/advisories/26891 http://secunia.com/advisories/26903 http://secunia.com/advisories/26912 http://secunia.com/advisories/27077 http://secunia.com/advisories/27087 http://secunia.com/advisories/27370 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1 SuSE Security Announcement: SUSE-SA:2007:052 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html http://www.ubuntu.com/usn/usn-524-1 http://www.vupen.com/english/advisories/2007/3184 http://www.vupen.com/english/advisories/2007/3262 XForce ISS Database: openoffice-tiff-bo(36656) https://exchange.xforce.ibmcloud.com/vulnerabilities/36656
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.