Sårbarhetslösningar

Nimsoft Cloud Monitor periodiska sårbarhetsskanning kontrollerar sårbarheten nedan. Om du vill se de senasta sårbarhetslösningarna som skannas av Nimsoft Cloud Monitor kan du gå till översikten med sårbarhetslösningar

Kategori: Ubuntu Local Security Checks Riskfaktor: High Tillagt: 18 mar 2010
Synopsis:

These remote packages are missing security patches : - libpng12-0
- libpng12-dev
- libpng3

Description:

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205)

Solution:

Upgrade to :
- libpng12-0-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng12-dev-1.2.37-1ubuntu0.1 (Ubuntu 9.10) - libpng3-1.2.37-1ubuntu0.1 (Ubuntu 9.10)

Risk factor:

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)