Lösungen für Schwachstellen

Die regelmäßigen Schwachstellenüberprüfungen von Nimsoft Cloud Monitor suchen die folgende Schwachstelle. Auf der Überblickseite Lösungen für Schwachstellen können Sie die zuletzt hinzugefügten Lösungen für Schwachstellen, die von Nimsoft Cloud Monitor überprüft werden, einsehen.

Kategorie: Ubuntu Local Security Checks Risikofaktor: High Hinzugefügt am: 18 Mär 2010
Synopsis:

These remote packages are missing security patches : - libpng12-0
- libpng12-dev
- libpng3

Description:

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205)

Solution:

Upgrade to :
- libpng12-0-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng12-dev-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng3-1.2.37-1ubuntu0.1 (Ubuntu 9.10)

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)