Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2006:214-1: gv Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the gv package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2006:214-1 (gv).
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU
gv 3.6.2, and possibly earlier versions, allows user-assisted attackers
to execute arbitrary code via a PostScript (PS) file with certain
headers that contain long comments, as demonstrated using the
Packages have been patched to correct this issue.
The patch used in the previous update still left the possibility of
causing X to consume unusual amounts of memory if gv is used to view a
carefully crafted image designed to exploit CVE-2006-5864. This update
uses an improved patch to address this issue.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:214-1
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.