|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200605-14] libextractor: Two heap-based buffer overflows Vulnerability Assessment Details
|
[GLSA-200605-14] libextractor: Two heap-based buffer overflows |
||
libextractor: Two heap-based buffer overflows Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200605-14 (libextractor: Two heap-based buffer overflows) Luigi Auriemma has found two heap-based buffer overflows in libextractor 0.5.13 and earlier: one of them occurs in the asf_read_header function in the ASF test, and the other occurs in the parse_trak_atom function in the Qt test. Impact By enticing a user to open a malformed file using an application that employs libextractor and its ASF or Qt tests, a possible hacker could execute arbitrary code in the context of the application running the affected library. Workaround There is no known workaround at this time. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2458 http://aluigi.altervista.org/adv/libextho-adv.txt Solution: All libextractor users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libextractor-0.5.14" Network Security Threat Level: Medium Networks Security ID: Vulnerability Assessment Copyright: (C) 2006 Michel Arboi |
||
Cables, Connectors |
ASUS H110M-R Motherboard Intel 6th/7th Gen LGA1151 DDR4 Micro-ATX i/o shield
$42.00
***NEW*** BCM RX67Q mATX Gaming Motherboard Combo | Intel i5-3470 | 16GB DDR3
$49.77
Micro ATX Desktop Motherboard ASUS H110M-C LGA 1151
$31.95
ASUS Prime Z390-A LGA 1151 Intel Z390 SATA USB 3.1 ATX Motherboard NO I/O
$99.00
Gigabyte AMD B550 UD AC Gaming Motherboard - AMD B550 Chipset - AM4 Socket - AMD
$89.99
ASUS H110M-C LGA 1151 Micro ATX Motherboard 8GB RAM No CPU
$39.99
Asrock Z390 Phantom Gaming 4S/AC Wifi 8th/9th Gen Intel 1151 Motherboard Bulk
$47.35
LGA 2011 X79 Motherboard DDR3 RAM M.2 USB 2.0 USB 3.0 SATA 3.0 SATA 2.0 PS/2
$44.97
ASUS PRIME Z690-P WIFI D4 ATX Motherboard Intel LGA1700 DDR4 HDMI
$99.99
GIGABYTE MB10-Datto Motherboard Xeon D-1521- SR2DF 2.40 GHz- Open Box
$121.50
|
||
No Discussions have been posted on this vulnerability. |