ID de Prueba:	1.3.6.1.4.1.25623.1.0.60460
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:056 (gnumeric)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to gnumeric announced via advisory MDVSA-2008:056. A vulnerability was found in the excel_read_HLINK function in the Microsoft Excel plugin in Gnumeric prior to version 1.8.1 that would allow for the execution of arbitrary code via a crafted XLS file containing XLS HLINK opcodes. The updated packages have been patched to correct this issues. Affected: 2007.1, 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2008:056 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0668 BugTraq ID: 27536 http://www.securityfocus.com/bid/27536 Debian Security Information: DSA-1546 (Google Search) http://www.debian.org/security/2008/dsa-1546 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html http://security.gentoo.org/glsa/glsa-200802-05.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:056 http://secunia.com/advisories/28725/ http://secunia.com/advisories/28799 http://secunia.com/advisories/28948 http://secunia.com/advisories/29702 http://secunia.com/advisories/29896 http://secunia.com/advisories/31339 SuSE Security Announcement: SUSE-SR:2008:016 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html http://www.ubuntu.com/usn/usn-604-1 http://www.vupen.com/english/advisories/2008/0462
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.