ID de Prueba:	1.3.6.1.4.1.25623.1.0.63206
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2009:019 (imlib2)
Resumen:	The remote host is missing an update to imlib2;announced via advisory MDVSA-2009:019.
Descripción:	Summary: The remote host is missing an update to imlib2 announced via advisory MDVSA-2009:019. Vulnerability Insight: A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file (CVE-2008-5187). The updated packages have been patched to prevent this. Affected: 2008.0, 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5187 BugTraq ID: 32371 http://www.securityfocus.com/bid/32371 Debian Security Information: DSA-1672 (Google Search) http://www.debian.org/security/2008/dsa-1672 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html http://security.gentoo.org/glsa/glsa-200812-23.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:019 http://www.openwall.com/lists/oss-security/2008/11/20/5 http://osvdb.org/49970 http://secunia.com/advisories/32796 http://secunia.com/advisories/32843 http://secunia.com/advisories/32949 http://secunia.com/advisories/32963 http://secunia.com/advisories/33323 http://secunia.com/advisories/33568 SuSE Security Announcement: SUSE-SR:2009:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html http://www.ubuntu.com/usn/USN-683-1 http://www.vupen.com/english/advisories/2008/3212
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.