Soluciones para vulnerabilidades

La exploración de vulnerabilidades periódica de Nimsoft Cloud Monitor busca la vulnerabilidad siguiente. Para ver las soluciones añadidas más recientemente que Nimsoft Cloud Monitor explora, visite Soluciones para vulnerabilidades.

Categoría: Ubuntu Local Security Checks Factor de riesgo: High Añadido: 18 mar 2010
Synopsis:

These remote packages are missing security patches : - libpng12-0
- libpng12-dev
- libpng3

Description:

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205)

Solution:

Upgrade to :
- libpng12-0-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng12-dev-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng3-1.2.37-1ubuntu0.1 (Ubuntu 9.10)

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)