Soluções para vulnerabilidades

O Exame Periódico de Vulnerabilidade do Nimsoft Cloud Monitor verifica a vulnerabilidade abaixo. Para ver as soluções para vulneralidades adicionadas mais recentemente que são examinadas pelo WatchMouse, acesse a visão geral das Soluções para vulnerabilidades

Categoria: Ubuntu Local Security Checks Fator de risco: High Adicionado: 18 Mar 2010
Synopsis:

These remote packages are missing security patches : - libpng12-0
- libpng12-dev
- libpng3

Description:

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205)

Solution:

Upgrade to :
- libpng12-0-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng12-dev-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng3-1.2.37-1ubuntu0.1 (Ubuntu 9.10)

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)