ID de Prueba:	1.3.6.1.4.1.25623.1.0.68244
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2010:136 (ghostscript)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to ghostscript announced via advisory MDVSA-2010:136. A vulnerability has been found and corrected in ghostscript: Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter (CVE-2010-1628). As a precaution ghostscriptc has been rebuilt to link against the system libpng library which was fixed with MDVSA-2010:133 The updated packages have been patched to correct this issue. Affected: 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:136 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1628 20100511 Multiple memory corruption vulnerabilities in Ghostscript http://seclists.org/fulldisclosure/2010/May/134 20100512 Multiple memory corruption vulnerabilities in Ghostscript http://www.securityfocus.com/archive/1/511243/100/0/threaded 39753 http://secunia.com/advisories/39753 40107 http://www.securityfocus.com/bid/40107 40580 http://secunia.com/advisories/40580 ADV-2010-1138 http://www.vupen.com/english/advisories/2010/1138 GLSA-201412-17 http://security.gentoo.org/glsa/glsa-201412-17.xml MDVSA-2010:134 http://www.mandriva.com/security/advisories?name=MDVSA-2010:134 SUSE-SR:2010:014 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html USN-961-1 http://www.ubuntu.com/usn/USN-961-1 [oss-security] 20100511 Re: CVE assignment: ghostscript stack-based overflow http://www.openwall.com/lists/oss-security/2010/05/12/1 [oss-security] 20100518 Re: CVE assignment: ghostscript stack-based overflow http://www.openwall.com/lists/oss-security/2010/05/18/7 http://bugs.ghostscript.com/show_bug.cgi?id=691295 https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.