Solutions de vulnérabilité

L'analyse périodique de vulnérabilité Nimsoft Cloud Monitor vérifie la vulnérabilité ci-dessous. Pour connaître les solutions de vulnérabilité les plus récemment ajoutées analysées par WatchMouse, rendez-vous sur la vue d'ensemble Solutions de vulnérabilité

Catégorie: Ubuntu Local Security Checks Facteur de risque: High Ajouté: 18 mars 2010
Synopsis:

These remote packages are missing security patches : - libpng12-0
- libpng12-dev
- libpng3

Description:

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205)

Solution:

Upgrade to :
- libpng12-0-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng12-dev-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng3-1.2.37-1ubuntu0.1 (Ubuntu 9.10)

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)