ZioBudda Italian Linux Portal - Consulenza - Documentazione - Notizie - Faq - Links

http://security.gentoo.org/glsa/glsa-200712-23.xml

Wireshark: Multiple vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Wireshark: Multiple vulnerabilities
Date: December 30, 2007
Bugs: #199958
ID: 200712-23

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities have been discovered in Wireshark, allowing
for the remote execution of arbitrary code and a Denial of Service.

Background
==========

Wireshark is a network protocol analyzer with a graphical front-end.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-analyzer/wireshark < 0.99.7 >= 0.99.7

Description
===========

Multiple buffer overflows and infinite loops were discovered in
multiple dissector and parser components, including those for MP3 and
NCP (CVE-2007-6111), PPP (CVE-2007-6112), DNP (CVE-2007-6113), SSL and
iSeries (OS/400) Communication traces (CVE-2007-6114), ANSI MAP
(CVE-2007-6115), Firebird/Interbase (CVE-2007-6116), HTTP
(CVE-2007-6117), MEGACO (CVE-2007-6118), DCP ETSI (CVE-2007-6119),
Bluetooth SDP (CVE-2007-6120), RPC Portmap (CVE-2007-6121), SMB
(CVE-2007-6438), IPv6 amd USB (CVE-2007-6439), WiMAX (CVE-2007-6441),
RPL (CVE-2007-6450), CIP (CVE-2007-6451). The vulnerabilities were
discovered by Stefan Esser, Beyond Security, Fabiodds, Peter Leeming,
Steve and ainsley.

Impact
======

A remote attacker could send specially crafted packets on a network
being monitored with Wireshark or entice a user to open a specially
crafted file, possibly resulting in the execution of arbitrary code
with the privileges of the user running Wireshark (which might be the
root user), or a Denial of Service.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Wireshark users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.7"

References
==========

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

Scritto da ziobudda, il 01-01-2008

Gentoo sicurezza wireshark

http://security.gentoo.org/glsa/glsa-200712-24.xml

AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-24
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: AMD64 x86 emulation GTK+ library: User-assisted execution of
arbitrary code
Date: December 30, 2007
Bugs: #201860
ID: 200712-24

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple integer overflow vulnerabilities in the AMD64 x86 emulation
GTK+ libraries may result in the execution of arbitrary code in
applications using Cairo.

Background
==========

Cairo is a 2D vector graphics library with cross-device output support.
The AMD64 x86 emulation GTK+ library packages Cairo libraries for 32bit
x86 emulation on AMD64.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 emul-linux-x86-gtklibs < 20071214 >= 20071214
-------------------------------------------------------------------
# Package 1 only applies to AMD64 users.

Description
===========

The Cairo versions used by the AMD64 x86 emulation GTK+ libraries were
vulnerable to integer overflow vulnerabilities (GLSA 200712-04).

Impact
======

A remote attacker could entice a user to view or process a specially
crafted PNG image file in an application linked against Cairo, possibly
leading to the execution of arbitrary code with the privileges of the
user running the application.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All AMD64 x86 emulation GTK+ library users should upgrade to the latest
version:

# emerge --sync
# emerge -a -1 -v ">=app-emulation/emul-linux-x86-gtklibs-20071214"

References
==========

[ 1 ] GLSA 200712-04
http://www.gentoo.org/security/en/glsa/glsa-200712-04.xml

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

Scritto da ziobudda, il 01-01-2008

Gentoo amd64. gtk sicurezza

Link Consiglia.

http://security.gentoo.org/glsa/glsa-200712-25.xml

OpenOffice.org: User-assisted arbitrary code execution

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: OpenOffice.org: User-assisted arbitrary code execution
Date: December 30, 2007
Bugs: #200771, #201799
ID: 200712-25

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

An unspecified vulnerability has been reported in OpenOffice.org,
possibly allowing for the execution of arbitrary code.

Background
==========

OpenOffice.org is an open source office productivity suite, including
word processing, spreadsheet, presentation, drawing, data charting,
formula editing, and file conversion facilities.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-office/openoffice < 2.3.1 >= 2.3.1
2 app-office/openoffice-bin < 2.3.1 >= 2.3.1
3 dev-db/hsqldb < 1.8.0.9 >= 1.8.0.9
-------------------------------------------------------------------
3 affected packages on all of their supported architectures.
-------------------------------------------------------------------

Description
===========

The HSQLDB engine, as used in Openoffice.org, does not properly enforce
restrictions to SQL statements.

Impact
======

A remote attacker could entice a user to open a specially crafted
document, possibly resulting in the remote execution of arbitrary Java
code with the privileges of the user running OpenOffice.org.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All OpenOffice.org users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/openoffice-2.3.1"

All OpenOffice.org binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/openoffice-bin-2.3.1"

All HSQLDB users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/hsqldb-1.8.0.9"

References
==========

[ 1 ] CVE-2007-4575
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHd+PZuhJ+ozIKI5gRAnw3AKCTR9OoJrvosyOIWsPR75YN/tIE1QCgmLpL
hRdVKFeTyqcR6PIKgWqWExw=
=6HQd
-----END PGP SIGNATURE-----

Scritto da ziobudda, il 01-01-2008

Gentoo OpenOffice.org sicurezza

http://security.gentoo.org/glsa/glsa-200712-15.xml

libexif: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-15
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: libexif: Multiple vulnerabilities
Date: December 29, 2007
Bugs: #202350
ID: 200712-15

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Two vulnerabilities in libexif possibly allow for the execution of
arbitrary code or a Denial of Service.

Background
==========

libexif is a library for parsing, editing and saving Exif metadata from
images. Exif, the Exchangeable image file format, specifies the
addition of metadata tags to JPEG, TIFF and RIFF files.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-libs/libexif < 0.6.16-r1 >= 0.6.16-r1

Description
===========

Meder Kydyraliev (Google Security) discovered an integer overflow
vulnerability in the exif_data_load_data_thumbnail() function leading
to a memory corruption (CVE-2007-6352) and an infinite recursion in the
exif_loader_write() function (CVE-2007-6351).

Impact
======

An attacker could entice the user of an application making use of
libexif to load an image file with specially crafted Exif tags,
possibly resulting in the execution of arbitrary code with the
privileges of the user running the application or a Denial of Service.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All libexif users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libexif-0.6.16-r1"

References
==========

[ 1 ] CVE-2007-6351
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6351
[ 2 ] CVE-2007-6352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6352

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHdkaKuhJ+ozIKI5gRAs1UAJ4qtBDcz/dP/WRokGqWDsVGBR3jmgCfafCh
UystxWJaY5guiFl40Grh+KY=
=R59E
-----END PGP SIGNATURE-----

Scritto da ziobudda, il 29-12-2007

Gentoo libexif sicurezza

Link Consiglia.

http://security.gentoo.org/glsa/glsa-200712-16.xml

Exiv2: Integer overflow

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-16
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Exiv2: Integer overflow
Date: December 29, 2007
Bugs: #202351
ID: 200712-16

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

An integer overflow vulnerability in Exiv2 possibly allows for the
execution of arbitrary code.

Background
==========

Exiv2 is a C++ library and set of tools for parsing, editing and saving
Exif and IPTC metadata from images. Exif, the Exchangeable image file
format, specifies the addition of metadata tags to JPEG, TIFF and RIFF
files.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-gfx/exiv2 < 0.13-r1 >= 0.13-r1

Description
===========

Meder Kydyraliev (Google Security) discovered an integer overflow
vulnerability in the JpegThumbnail::setDataArea() method leading to a
heap-based buffer overflow.

Impact
======

An attacker could entice the user of an application making use of Exiv2
or an application included in Exiv2 to load an image file with
specially crafted Exif tags, possibly resulting in the execution of
arbitrary code with the privileges of the user running the application.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Exiv2 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-gfx/exiv2-0.13-r1"

References
==========

[ 1 ] CVE-2007-6353
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6353

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHdk28uhJ+ozIKI5gRAmA/AKCDnwbIdX1k8+WhsLyRW9AS4r0RzACaAkrc
UumNChLgDufy7ZhLpou3CGA=
=EcP3
-----END PGP SIGNATURE-----

Scritto da ziobudda, il 29-12-2007

Gentoo exiv2 sicurezza

http://security.gentoo.org/glsa/glsa-200712-17.xml

exiftags: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-17
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: exiftags: Multiple vulnerabilities
Date: December 29, 2007
Bugs: #202354
ID: 200712-17

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities in exiftags possibly allow for the execution
of arbitrary code or a Denial of Service.

Background
==========

exiftags is a library and set of tools for parsing, editing and saving
Exif metadata from images. Exif, the Exchangeable image file format,
specifies the addition of metadata tags to JPEG, TIFF and RIFF files.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-gfx/exiftags < 1.01 >= 1.01

Description
===========

Meder Kydyraliev (Google Security) discovered that Exif metadata is not
properly sanitized before being processed, resulting in illegal memory
access in the postprop() and other functions (CVE-2007-6354). He also
discovered integer overflow vulnerabilities in the parsetag() and other
functions (CVE-2007-6355) and an infinite recursion in the readifds()
function caused by recursive IFD references (CVE-2007-6356).

Impact
======

An attacker could entice the user of an application making use of
exiftags or an application included in exiftags to load an image file
with specially crafted Exif tags, possibly resulting in the execution
of arbitrary code with the privileges of the user running the
application or a Denial of Service.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All exiftags users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-gfx/exiftags-1.01"

References
==========

[ 1 ] CVE-2007-6354
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6354
[ 2 ] CVE-2007-6355
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6355
[ 3 ] CVE-2007-6356
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6356

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHdlLBuhJ+ozIKI5gRAtz/AJwJMT4Gl3RaLl9RhM3nldvZg1G5GwCfb162
ES9/nzyGoX/7sZHZM/e2VS0=
=UvnK
-----END PGP SIGNATURE-----

Scritto da ziobudda, il 29-12-2007

Gentoo exiftags sicurezza

http://security.gentoo.org/glsa/glsa-200712-18.xml

Multi-Threaded DAAP Daemon: Multiple vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-18
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Multi-Threaded DAAP Daemon: Multiple vulnerabilities
Date: December 29, 2007
Bugs: #200110
ID: 200712-18

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities in the web server in the Multi-Threaded DAAP
Daemon may lead to the remote execution of arbitrary code.

Background
==========

Multi-Threaded DAAP Daemon (mt-daapd), also known as the Firefly Media
Server, is a software to serve digital music to the Roku Soundbridge
and Apple's iTunes.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-sound/mt-daapd < 0.2.4.1 >= 0.2.4.1

Description
===========

nnp discovered multiple vulnerabilities in the XML-RPC handler in the
file webserver.c. The ws_addarg() function contains a format string
vulnerability, as it does not properly sanitize username and password
data from the "Authorization: Basic" HTTP header line (CVE-2007-5825).
The ws_decodepassword() and ws_getheaders() functions do not correctly
handle empty Authorization header lines, or header lines without a ':'
character, leading to NULL pointer dereferences (CVE-2007-5824).

Impact
======

A remote attacker could send specially crafted HTTP requests to the web
server in the Multi-Threaded DAAP Daemon, possibly leading to the
execution of arbitrary code with the privileges of the user running the
web server or a Denial of Service.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Multi-Threaded DAAP Daemon users should upgrade to the latest
version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-sound/mt-daapd-0.2.4.1"

References
==========

[ 1 ] CVE-2007-5824
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5824
[ 2 ] CVE-2007-5825
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5825

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

Scritto da ziobudda, il 29-12-2007

Gentoo daap sicurezza

http://security.gentoo.org/glsa/glsa-200712-19.xml

Syslog-ng: Denial of Service

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-19
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Syslog-ng: Denial of Service
Date: December 29, 2007
Bugs: #202718
ID: 200712-19

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

A Denial of Service vulnerability has been discovered in Syslog-ng.

Background
==========

Syslog-ng is a flexible and scalable system logger.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-admin/syslog-ng < 2.0.6 >= 2.0.6

Description
===========

Oriol Carreras reported a NULL pointer dereference in the
log_msg_parse() function when processing timestamps without a
terminating whitespace character.

Impact
======

A remote attacker could send a specially crafted event to a vulnerable
Syslog-ng server, resulting in a crash.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Syslog-ng users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/syslog-ng-2.0.6"

References
==========

[ 1 ] CVE-2007-6437
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6437

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

Scritto da ziobudda, il 29-12-2007

Gentoo sicurezza syslog-ng

http://security.gentoo.org/glsa/glsa-200712-21.xml

Mozilla Firefox, SeaMonkey: Multiple vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-21
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Mozilla Firefox, SeaMonkey: Multiple vulnerabilities
Date: December 29, 2007
Bugs: #198965, #200909
ID: 200712-21

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities have been discovered in Mozilla Firefox and
Mozilla Seamonkey.

Background
==========

Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey
is a free, cross-platform Internet suite.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-client/mozilla-firefox < 2.0.0.11 >= 2.0.0.11
2 www-client/mozilla-firefox-bin < 2.0.0.11 >= 2.0.0.11
3 www-client/seamonkey < 1.1.7 >= 1.1.7
4 www-client/seamonkey-bin < 1.1.7 >= 1.1.7
-------------------------------------------------------------------
4 affected packages on all of their supported architectures.
-------------------------------------------------------------------

Description
===========

Jesse Ruderman and Petko D. Petkov reported that the jar protocol
handler in Mozilla Firefox and Seamonkey does not properly check MIME
types (CVE-2007-5947). Gregory Fleischer reported that the
window.location property can be used to generate a fake HTTP Referer
(CVE-2007-5960). Multiple memory errors have also been reported
(CVE-2007-5959).

Impact
======

A remote attacker could possibly exploit these vulnerabilities to
execute arbitrary code in the context of the browser and conduct
Cross-Site-Scripting or Cross-Site Request Forgery attacks.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot -v ">=www-client/mozilla-firefox-2.0.0.11"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask -1 -v ">=www-client/mozilla-firefox-bin-2.0.0.11"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.7"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot -v ">=www-client/seamonkey-bin-1.1.7"

References
==========

[ 1 ] CVE-2007-5947
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5947
[ 2 ] CVE-2007-5959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959
[ 3 ] CVE-2007-5960
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5960

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

Scritto da ziobudda, il 29-12-2007

Gentoo firefox mozilla seamonkey sicurezza