|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200501-11] Dillo: Format string vulnerability Vulnerability Scan
Vulnerability Scan Summary
Dillo: Format string vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200501-11
(Dillo: Format string vulnerability)
Gentoo Linux developer Tavis Ormandy found a format string bug in
Dillo's handling of messages in a_Interface_msg().
Impact
A possible hacker could craft a malicious web page which, when accessed
using Dillo, would trigger the format string vulnerability and
potentially execute arbitrary code with the rights of the user running
Dillo.
Workaround
There is no known workaround at this time.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0012
Solution:
All Dillo users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/dillo-0.8.3-r4"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
