French Security Incident Response Team

Termes et NomenclatureDéfinition des niveaux de risquesConfidentialité et Charte de confianceService FrSIRT VNS

FrSIRT   

      

   français Français   anglais English

 
Veille en vulnérabilités
FrSIRT VNS Publisher
Demande d'informations
Période d'essai gratuite
 

Bulletins et avis de vulnérabilités
Bulletins de sécurité et avis de vulnérabilités Linux
Virus & AlertesMenaces en temps réel / Blog Sécurité Informatique
Attaques Zero-day (0-jour)
Rechercher une vulnérabilité
 

Déclarer un incident de sécurité
Mailing liste Newsletter Sécurité informatique
 

A propos de FrSIRT / ADConsulting
Nos Clients & RéférencesFrSIRT Dans la presse
Espace Annonceurs
Offre d'emploi et stage Sécurité Informatique
Nous contacter

Mandriva Security Update Fixes XFree86 Integer Overflow Vulnerabilities


Date de Publication : 2008-01-25 © FrSIRT.COM
Titre : Mandriva Security Update Fixes XFree86 Integer Overflow Vulnerabilities
Identifiant : FrSIRT/AVIS-2008-0267
CVE ID : CVE-2007-5958 - CVE-2007-5958 - CVE-2007-6428 - CVE-2007-6429 - CVE-2008-0006
Risque : Modéré (2/4) -
Exploitable à distance : Oui
Exploitable en local : Oui
 

En savoir plus

 
  Description
  Produits affectés
  Solution
  Références
Description Technique    TXT (Plain Text)  PDF (Portable Document Format)  XML (Extensible Markup Language)  SMS (Short Message Service) 

Plusieurs vulnérabilités ont été identifiées dans Mandriva, elles pourraient être exploitées par des attaquants afin d'obtenir des informations sensibles, causer un déni de service ou compromettre un système vulnérable [...]

Solution

Installer les mises à jour :

Corporate 3.0:
edf0b59930673873fb08cccc9be6455d corporate/3.0/i586/X11R6-contrib-4.3-32.15.C30mdk.i586.rpm
d7dc44b08ae02df79df8a2f215013dba corporate/3.0/i586/XFree86-100dpi-fonts-4.3-32.15.C30mdk.i586.rpm
9417e84fc3f0e6e84d04efbcbb813657 corporate/3.0/i586/XFree86-4.3-32.15.C30mdk.i586.rpm
8c31072dc21135ef055f9581012a87f4 corporate/3.0/i586/XFree86-75dpi-fonts-4.3-32.15.C30mdk.i586.rpm
4081b67e881dce355c7a1ea1fc080052 corporate/3.0/i586/XFree86-Xnest-4.3-32.15.C30mdk.i586.rpm
411a7ba5603126d8d1b7e1aa39a58b8d corporate/3.0/i586/XFree86-Xvfb-4.3-32.15.C30mdk.i586.rpm
0c23c135b3287f36409e9ec9090e41da corporate/3.0/i586/XFree86-cyrillic-fonts-4.3-32.15.C30mdk.i586.rpm
cdeec4de08d0a007eb808c2b45628b7c corporate/3.0/i586/XFree86-doc-4.3-32.15.C30mdk.i586.rpm
92db94203737fbb3aa633f24570de55f corporate/3.0/i586/XFree86-glide-module-4.3-32.15.C30mdk.i586.rpm
0e6f2844da5b19134c9a577a587a3972 corporate/3.0/i586/XFree86-server-4.3-32.15.C30mdk.i586.rpm
ad3811b39ed3eb16389d25ba63a9bb12 corporate/3.0/i586/XFree86-xfs-4.3-32.15.C30mdk.i586.rpm
d128d5d3510f6006f24e430ce284abe8 corporate/3.0/i586/libxfree86-4.3-32.15.C30mdk.i586.rpm
8c3daa3ddc0cfc02b6a533486b5205ca corporate/3.0/i586/libxfree86-devel-4.3-32.15.C30mdk.i586.rpm
6e6ba11a9108e3d1eb5eee2e49258e1b corporate/3.0/i586/libxfree86-static-devel-4.3-32.15.C30mdk.i586.rpm
c6ab0fa0baee5dba4a1387edd17e9d66 corporate/3.0/SRPMS/XFree86-4.3-32.15.C30mdk.src.rpm

Corporate 3.0/X86_64:
c8196dcee230fb85dfbc3f31fdfd2647 corporate/3.0/x86_64/X11R6-contrib-4.3-32.15.C30mdk.x86_64.rpm
03f0c7b57884c903bcda039946af56ec corporate/3.0/x86_64/XFree86-100dpi-fonts-4.3-32.15.C30mdk.x86_64.rpm
2a3715df350a35556cbf538b480a46a8 corporate/3.0/x86_64/XFree86-4.3-32.15.C30mdk.x86_64.rpm
bf88bd71991d906ee860f61ccdd1fdb3 corporate/3.0/x86_64/XFree86-75dpi-fonts-4.3-32.15.C30mdk.x86_64.rpm
9c23466d3edf760f78d7556de9ad48f2 corporate/3.0/x86_64/XFree86-Xnest-4.3-32.15.C30mdk.x86_64.rpm
5ed72dfb027ff9f04ec1c4e6e7e673fd corporate/3.0/x86_64/XFree86-Xvfb-4.3-32.15.C30mdk.x86_64.rpm
61c0fe60ed278ec94ce513134a05a9d2 corporate/3.0/x86_64/XFree86-cyrillic-fonts-4.3-32.15.C30mdk.x86_64.rpm
a2ae652d88c648b9555e1579717f7c7d corporate/3.0/x86_64/XFree86-doc-4.3-32.15.C30mdk.x86_64.rpm
cd0b21b902fd2b2de31810d86a294b7f corporate/3.0/x86_64/XFree86-server-4.3-32.15.C30mdk.x86_64.rpm
24cef9af7fbaf1e19adba76c3fe9b244 corporate/3.0/x86_64/XFree86-xfs-4.3-32.15.C30mdk.x86_64.rpm
d48804766743b3104fd47f95b615d0fc corporate/3.0/x86_64/lib64xfree86-4.3-32.15.C30mdk.x86_64.rpm
f5162ea84f6557df38fcd5d3fb810b39 corporate/3.0/x86_64/lib64xfree86-devel-4.3-32.15.C30mdk.x86_64.rpm
ef2c80adf27aec9fc5f925e1986cc906 corporate/3.0/x86_64/lib64xfree86-static-devel-4.3-32.15.C30mdk.x86_64.rpm
c6ab0fa0baee5dba4a1387edd17e9d66 corporate/3.0/SRPMS/XFree86-4.3-32.15.C30mdk.src.rpm

Historique

2008-01-25 : Version Initiale

Recevez les bulletins FrSIRT

Le service FrSIRT VNS permet aux professionnels de la sécurité (RSSI, DSI, administrateurs et consultants) de recevoir en temps-réel, par email, SMS et flux RSS/XML, des bulletins de vulnérabilités complets, détaillés et personnalisés.


 
 

Recherche    

      

Newsletter    

    
 

Mozilla Products Remote Code Execution Vulnerabilities

Mozilla Firefox Unspecified Remote Command Execution Vulnerability

Mozilla JavaScript Garbage Collector Code Execution Vulnerability

Mozilla Thunderbird Code Execution and Cross Site Scripting Issues

Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues

Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

IBM Tivoli Directory Server Entry Handling Double-Free Vulnerability

IBM AFP Viewer Plug-In "SRC" Property Buffer Overflow Vulnerability

IBM Hardware Management Console Cross Site Scripting Vulnerabilities

IBM OS/400 BrSmRcvAndCheck Local Buffer Overflow Vulnerability

IBM DB2 Multiple Buffer Overflow Vulnerabilities

IBM WebSphere Application Server Security Exposure Vulnerability

IBM AIX Multiple Command Local Privilege Escalation Vulnerabilities

Apple Mac OS X Command Execution Vulnerabilities

Apple Safari for Mac OS X Remote Code Execution Vulnerability

Apple Mac OS X ARDAgent Local Privilege Escalation Vulnerability

Apple Safari Code Execution and Information Disclosure Vulnerabilities

Apple QuickTime Multiple File Handling Code Execution Vulnerabilities

Apple Safari for Windows Remote Code Execution Vulnerability

Apple Mac OS X Command Execution Vulnerabilities

  FrSIRT.COM © Tous droits réservés 2003-2008 - Notice Légale  sécurité informatique