9.3 - DSA-2426

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	gimp security update

Informations
Name	DSA-2426	First vendor Publication	2012-03-06
Vendor	Debian	Last vendor Modification	2012-03-06
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Several vulnerabilities have been identified in GIMP, the GNU Image Manipulation Program.

CVE-2010-4540 Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file.

CVE-2010-4541 Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file.

CVE-2010-4542 Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in in the GFIG plugin allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file.

CVE-2010-4543 Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image.

CVE-2011-1782 The correction for CVE-2010-4543 was incomplete.

CVE-2011-2896 The LZW decompressor in the LZWReadByte function in plug-ins/common/file-gif-load.c does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream.

For the stable distribution (squeeze), these problems have been fixed in version 2.6.10-1+squeeze3.

For the testing distribution (wheezy) and the unstable distribution (sid), these problems have been fixed in version 2.6.11-5.

We recommend that you upgrade your gimp packages.

Original Source

Url : http://www.debian.org/security/2012/dsa-2426

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-787	Out-of-bounds Write (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13772

Oval ID:	oval:org.mitre.oval:def:13772
Title:	USN-1109-1 -- gimp vulnerabilities
Description:	It was discovered that GIMP incorrectly handled malformed data in certain plugin configuration files. If a user were tricked into opening a specially crafted plugin configuration file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user�s privileges. The default compiler options for affected releases should reduce the vulnerability to a denial of service. It was discovered that GIMP incorrectly handled malformed PSP image files. If a user were tricked into opening a specially crafted PSP image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user�s privileges
Family:	unix	Class:	patch
Reference(s):	USN-1109-1 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	gimp
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section libgimp2.0-doc DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp-data DPKG is earlier than 2.4.5-1ubuntu2.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libgimp2.0 DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp-libcurl DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp-python DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp-dbg DPKG is earlier than 2.4.5-1ubuntu2.3 AND libgimp2.0-dev DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp-gnomevfs DPKG is earlier than 2.4.5-1ubuntu2.3 AND gimp DPKG is earlier than 2.4.5-1ubuntu2.3 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section libgimp2.0-doc DPKG is earlier than 2.6.10-1ubuntu3.2 AND gimp-data DPKG is earlier than 2.6.10-1ubuntu3.2 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section gimp-dbg DPKG is earlier than 2.6.10-1ubuntu3.2 AND libgimp2.0-dev DPKG is earlier than 2.6.10-1ubuntu3.2 AND libgimp2.0 DPKG is earlier than 2.6.10-1ubuntu3.2 AND gimp DPKG is earlier than 2.6.10-1ubuntu3.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section libgimp2.0-doc DPKG is earlier than 2.6.7-1ubuntu1.2 AND gimp-data DPKG is earlier than 2.6.7-1ubuntu1.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is lpia AND Packages section gimp-dbg DPKG is earlier than 2.6.7-1ubuntu1.2 AND libgimp2.0-dev DPKG is earlier than 2.6.7-1ubuntu1.2 AND libgimp2.0 DPKG is earlier than 2.6.7-1ubuntu1.2 AND gimp DPKG is earlier than 2.6.7-1ubuntu1.2 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section libgimp2.0-doc DPKG is earlier than 2.6.8-2ubuntu1.2 AND gimp-data DPKG is earlier than 2.6.8-2ubuntu1.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Packages section gimp-dbg DPKG is earlier than 2.6.8-2ubuntu1.2 AND libgimp2.0-dev DPKG is earlier than 2.6.8-2ubuntu1.2 AND libgimp2.0 DPKG is earlier than 2.6.8-2ubuntu1.2 AND gimp DPKG is earlier than 2.6.8-2ubuntu1.2

Definition Id: oval:org.mitre.oval:def:14080

Oval ID:	oval:org.mitre.oval:def:14080
Title:	USN-1147-1 -- gimp vulnerability
Description:	gimp: The GNU Image Manipulation Program GIMP could be made to run programs as your login if it opened a specially crafted file.
Family:	unix	Class:	patch
Reference(s):	USN-1147-1 CVE-2011-1782	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	gimp
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND gimp DPKG is earlier than 2.6.11-1ubuntu6.1 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND gimp DPKG is earlier than 2.6.8-2ubuntu1.3 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND gimp DPKG is earlier than 2.6.10-1ubuntu3.3

Definition Id: oval:org.mitre.oval:def:15350

Oval ID:	oval:org.mitre.oval:def:15350
Title:	DSA-2426-1 gimp -- several
Description:	Several vulnerabilities have been identified in GIMP, the GNU Image Manipulation Program. CVE-2010-4540 Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long Position field in a plugin configuration file. CVE-2010-4541 Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. CVE-2010-4542 Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in in the GFIG plugin allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. CVE-2010-4543 Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro plugin allows remote attackers to cause a denial of service or possibly execute arbitrary code via a PSP_COMP_RLE image file that begins a long run count at the end of the image. CVE-2011-1782 The correction for CVE-2010-4543 was incomplete. CVE-2011-2896 The LZW decompressor in the LZWReadByte function in plug-ins/common/file-gif-load.c does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream.
Family:	unix	Class:	patch
Reference(s):	DSA-2426-1 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543 CVE-2011-1782 CVE-2011-2896	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	gimp
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND gimp DPKG is earlier than 2.6.10-1+squeeze3

Definition Id: oval:org.mitre.oval:def:21028

Oval ID:	oval:org.mitre.oval:def:21028
Title:	USN-1214-1 -- gimp vulnerability
Description:	GIMP could be made to run programs as your login if it opened a specially crafted GIF file.
Family:	unix	Class:	patch
Reference(s):	USN-1214-1 CVE-2011-2896	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04	Product(s):	gimp
Definition Synopsis:
Ubuntu 11.04 release section Ubuntu 11.04 is installed AND gimp DPKG is earlier than 0:2.6.11-1ubuntu6.2 AND Ubuntu 10.10 release section Ubuntu 10.10 is installed AND gimp DPKG is earlier than 0:2.6.10-1ubuntu3.4 AND Ubuntu 10.04 release section Ubuntu 10.04 is installed AND gimp DPKG is earlier than 0:2.6.8-2ubuntu1.4

Definition Id: oval:org.mitre.oval:def:21320

Oval ID:	oval:org.mitre.oval:def:21320
Title:	RHSA-2012:0302: cups security and bug fix update (Low)
Description:	The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0302-03 CVE-2011-2896	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	cups
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section cups-lpd is earlier than 1:1.3.7-30.el5 AND cups-libs is earlier than 1:1.3.7-30.el5 AND cups-devel is earlier than 1:1.3.7-30.el5 AND cups is earlier than 1:1.3.7-30.el5

Definition Id: oval:org.mitre.oval:def:21949

Oval ID:	oval:org.mitre.oval:def:21949
Title:	RHSA-2011:0839: gimp security update (Moderate)
Description:	Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0839-01 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543	Version:	55
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	gimp
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section gimp-libs is earlier than 2:2.6.9-4.el6_1.1 AND gimp-devel is earlier than 2:2.6.9-4.el6_1.1 AND gimp-help-browser is earlier than 2:2.6.9-4.el6_1.1 AND gimp is earlier than 2:2.6.9-4.el6_1.1 AND gimp-devel-tools is earlier than 2:2.6.9-4.el6_1.1

Definition Id: oval:org.mitre.oval:def:23080

Oval ID:	oval:org.mitre.oval:def:23080
Title:	ELSA-2012:0302: cups security and bug fix update (Low)
Description:	The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0302-03 CVE-2011-2896	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	cups
Definition Synopsis:
Oracle Linux 5.x rpm test cups-lpd is earlier than 1:1.3.7-30.el5 AND cups-libs is earlier than 1:1.3.7-30.el5 AND cups-devel is earlier than 1:1.3.7-30.el5 AND cups is earlier than 1:1.3.7-30.el5

Definition Id: oval:org.mitre.oval:def:23689

Oval ID:	oval:org.mitre.oval:def:23689
Title:	ELSA-2011:0839: gimp security update (Moderate)
Description:	Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0839-01 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543	Version:	21
Platform(s):	Oracle Linux 6	Product(s):	gimp
Definition Synopsis:
Oracle Linux 6.x rpm test gimp-libs is earlier than 2:2.6.9-4.el6_1.1 AND gimp-devel is earlier than 2:2.6.9-4.el6_1.1 AND gimp-help-browser is earlier than 2:2.6.9-4.el6_1.1 AND gimp is earlier than 2:2.6.9-4.el6_1.1 AND gimp-devel-tools is earlier than 2:2.6.9-4.el6_1.1

Definition Id: oval:org.mitre.oval:def:27046

Oval ID:	oval:org.mitre.oval:def:27046
Title:	RHSA-2011:1635 -- cups security and bug fix update (Low)
Description:	The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems. A heap-based buffer overflow flaw was found in the Lempel-Ziv-Welch (LZW) decompression algorithm implementation used by the CUPS GIF image format reader. An attacker could create a malicious GIF image file that, when printed, could possibly cause CUPS to crash or, potentially, execute arbitrary code with the privileges of the "lp" user. (CVE-2011-2896) These updated cups packages also provide fixes for the following bugs: * Previously CUPS was not correctly handling the language setting LANG=en_US.ASCII. As a consequence lpadmin, lpstat and lpinfo binaries were not displaying any output when the LANG=en_US.ASCII environment variable was used. As a result of this update the problem is fixed and the expected output is now displayed. (BZ#681836) * Previously the scheduler did not check for empty values of several configuration directives. As a consequence it was possible for the CUPS daemon (cupsd) to crash when a configuration file contained certain empty values. With this update the problem is fixed and cupsd no longer crashes when reading such a configuration file. (BZ#706673) * Previously when printing to a raw print queue, when using certain printer models, CUPS was incorrectly sending SNMP queries. As a consequence there was a noticeable 4-second delay between queueing the job and the start of printing. With this update the problem is fixed and CUPS no longer tries to collect SNMP supply and status information for raw print queues. (BZ#709896) * Previously when using the BrowsePoll directive it could happen that the CUPS printer polling daemon (cups-polld) began polling before the network interfaces were set up after a system boot. CUPS was then caching the failed hostname lookup. As a consequence no printers were found and the error, "Host name lookup failure", was logged. With this update the code that re-initializes the resolver after failure in cups-polld is fixed and as a result CUPS will obtain the correct network settings to use in printer discovery. (BZ#712430) * The MaxJobs directive controls the maximum number of print jobs that are kept in memory. Previously, once the number of jobs reached the limit, the CUPS system failed to automatically purge the data file associated with the oldest completed job from the system in order to make room for a new print job. This bug has been fixed, and the jobs beyond the set limit are now properly purged. (BZ#735505) * The cups init script (/etc/rc.d/init.d/cups) uses the daemon function (from /etc/rc.d/init.d/functions) to start the cups process, but previously it did not source a configuration file from the /etc/sysconfig/ directory. As a consequence, it was difficult to cleanly set the nice level or cgroup for the cups daemon by setting the NICELEVEL or CGROUP_DAEMON variables. With this update, the init script is fixed. (BZ#744791) All users of CUPS are advised to upgrade to these updated packages, which contain backported patches to resolve these issues. After installing this update, the cupsd daemon will be restarted automatically.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1635 CVE-2011-2896	Version:	3
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	cups
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section cups is earlier than 0:1.4.2-44.el6 AND cups-debuginfo is earlier than 0:1.4.2-44.el6 AND cups-devel is earlier than 0:1.4.2-44.el6 AND cups-libs is earlier than 0:1.4.2-44.el6 AND cups-lpd is earlier than 0:1.4.2-44.el6 AND cups-php is earlier than 0:1.4.2-44.el6

Definition Id: oval:org.mitre.oval:def:27488

Oval ID:	oval:org.mitre.oval:def:27488
Title:	DEPRECATED: ELSA-2011-0839 -- gimp security update (moderate)
Description:	[2:2.6.9-4.1] - fix various overflows (#666793, #703403, #703405, #703407, #704512)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0839 CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	gimp
Definition Synopsis:
Oracle Linux 6.x Packages match section gimp is earlier than 0:2.6.9-4.el6_1.1 AND gimp-devel is earlier than 0:2.6.9-4.el6_1.1 AND gimp-devel-tools is earlier than 0:2.6.9-4.el6_1.1 AND gimp-help-browser is earlier than 0:2.6.9-4.el6_1.1 AND gimp-libs is earlier than 0:2.6.9-4.el6_1.1

Definition Id: oval:org.mitre.oval:def:27680

Oval ID:	oval:org.mitre.oval:def:27680
Title:	DEPRECATED: ELSA-2012-0302 -- cups security and bug fix update (low)
Description:	[1:1.3.7-30] - Backported patch to fix transcoding for ASCII (bug #759081, STR #3832). [1:1.3.7-29] - The imageto* filters could crash with bad GIF files (CVE-2011-2896, STR #3867, STR #3914, bug #752118). [1:1.3.7-28] - Web interface didn't show completed jobs for printer (STR #3436, bug #625900) - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955) - Fixed condition in textonly filter to create temporary file regardless of the number of copies specified. (bug #660518) [1:1.3.7-27] - Call avc_init() only once to not leak file descriptors (bug #668009).
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0302 CVE-2011-2896	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	cups
Definition Synopsis:
Oracle Linux 5.x Packages match section cups is earlier than 0:1.3.7-30.el5 AND cups-devel is earlier than 0:1.3.7-30.el5 AND cups-libs is earlier than 0:1.3.7-30.el5 AND cups-lpd is earlier than 0:1.3.7-30.el5

Definition Id: oval:org.mitre.oval:def:27752

Oval ID:	oval:org.mitre.oval:def:27752
Title:	DEPRECATED: ELSA-2012-1181 -- gimp security update (moderate)
Description:	[2:2.2.13-2.0.7.el5_8.5] - fix overflow in GIF loader (CVE-2012-3481) [2:2.2.13-2.0.7.el5_8.4] - fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402) - fix heap corruption and overflow in GIF plug-in (CVE-2011-2896) - fix overflow in CEL plug-in (CVE-2012-3403)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-1181 CVE-2009-3909 CVE-2012-3402 CVE-2012-3403 CVE-2012-3481 CVE-2011-2896	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	gimp
Definition Synopsis:
Oracle Linux 5.x Packages match section gimp is earlier than 0:2.2.13-2.0.7.el5_8.5 AND gimp-devel is earlier than 0:2.2.13-2.0.7.el5_8.5 AND gimp-libs is earlier than 0:2.2.13-2.0.7.el5_8.5

Definition Id: oval:org.mitre.oval:def:27838

Oval ID:	oval:org.mitre.oval:def:27838
Title:	DEPRECATED: ELSA-2012-1180 -- gimp security update (moderate)
Description:	[2:2.6.9-4.3] - fix overflow in GIF loader (#847303) [2:2.6.9-4.2] - fix overflows in GIF, CEL loaders (#727800, #839020)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-1180 CVE-2012-3403 CVE-2012-3481 CVE-2011-2896	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	gimp
Definition Synopsis:
Oracle Linux 6.x Packages match section gimp is earlier than 0:2.6.9-4.el6_3.3 AND gimp-devel is earlier than 0:2.6.9-4.el6_3.3 AND gimp-devel-tools is earlier than 0:2.6.9-4.el6_3.3 AND gimp-help-browser is earlier than 0:2.6.9-4.el6_3.3 AND gimp-libs is earlier than 0:2.6.9-4.el6_3.3

Definition Id: oval:org.mitre.oval:def:28007

Oval ID:	oval:org.mitre.oval:def:28007
Title:	ELSA-2011-1635 -- cups security and bug fix update (low)
Description:	[1.4.2-44] - Init script should source /etc/sysconfig/cups (bug #744791) [1.4.2-43] - The scheduler might leave old job data files in the spool directory (STR #3795, STR #3880, bug #735505). [1.4.2-42] - A further fix for imageto* filters crashing with bad GIF files (STR #3914, bug #714118). [1.4.2-41] - The imageto* filters could crash with bad GIF files (STR #3867, bug #714118). [1.4.2-40] - Map ASCII to ISO-8859-1 in the transcoding code (STR #3832, bug #681836). - Check for empty values for some configuration directives (STR #3861, bug #706673). - The network backends no longer try to collect SNMP supply and status information for raw queues (STR #3809, bug #709896). - Handle EAI_NONAME when resolving hostnames (bug #712430).
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1635 CVE-2011-2896	Version:	3
Platform(s):	Oracle Linux 6	Product(s):	cups
Definition Synopsis:
Oracle Linux 6.x Packages match section cups is earlier than 0:1.4.2-44.el6 AND cups-devel is earlier than 0:1.4.2-44.el6 AND cups-libs is earlier than 0:1.4.2-44.el6 AND cups-lpd is earlier than 0:1.4.2-44.el6 AND cups-php is earlier than 0:1.4.2-44.el6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Cups cpe:2.3:a:apple:cups:1.4.6:::::::* cpe:2.3:a:apple:cups:1.4.5:::::::* cpe:2.3:a:apple:cups:1.4.4:::::::* cpe:2.3:a:apple:cups:1.4.3:::::::* cpe:2.3:a:apple:cups:1.4.2:::::::* cpe:2.3:a:apple:cups:1.4.1:::::::* cpe:2.3:a:apple:cups:1.4.0:::::::* cpe:2.3:a:apple:cups:1.4:b1:::::: cpe:2.3:a:apple:cups:1.4:b2:::::: cpe:2.3:a:apple:cups:1.4:rc1:::::: cpe:2.3:a:apple:cups:1.4:b3:::::: cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.3.11:::::::* cpe:2.3:a:apple:cups:1.3.10:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1:::::: cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.21:-:::::: cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:::::::: cpe:2.3:a:apple:cups:-:::::::*	94
Application	Gimp cpe:2.3:a:gimp:gimp:2.6.9:::::::* cpe:2.3:a:gimp:gimp:2.6.8:::::::* cpe:2.3:a:gimp:gimp:2.6.7:::::::* cpe:2.3:a:gimp:gimp:2.6.6:::::::* cpe:2.3:a:gimp:gimp:2.6.5:::::::* cpe:2.3:a:gimp:gimp:2.6.4:::::::* cpe:2.3:a:gimp:gimp:2.6.3:::::::* cpe:2.3:a:gimp:gimp:2.6.2:::::::* cpe:2.3:a:gimp:gimp:2.6.11:::::::* cpe:2.3:a:gimp:gimp:2.6.10:::::::* cpe:2.3:a:gimp:gimp:2.6.1:::::::* cpe:2.3:a:gimp:gimp:2.6.0:::::::* cpe:2.3:a:gimp:gimp:2.4.7:::::::* cpe:2.3:a:gimp:gimp:2.4.6:::::::* cpe:2.3:a:gimp:gimp:2.4.5:::::::* cpe:2.3:a:gimp:gimp:2.4.4:::::::* cpe:2.3:a:gimp:gimp:2.4.3:::::::* cpe:2.3:a:gimp:gimp:2.4.2:::::::* cpe:2.3:a:gimp:gimp:2.4.1:::::::* cpe:2.3:a:gimp:gimp:2.4.0:::::::* cpe:2.3:a:gimp:gimp:2.2.4:::::::* cpe:2.3:a:gimp:gimp:2.2.3:::::::* cpe:2.3:a:gimp:gimp:2.2.14:::::::* cpe:2.3:a:gimp:gimp:2.2.13:::::::* cpe:2.3:a:gimp:gimp:2.2:::::::* cpe:2.3:a:gimp:gimp:2.0.5:::::::* cpe:2.3:a:gimp:gimp:2.0:::::::* cpe:2.3:a:gimp:gimp::::::::	28
Application	Swi-Prolog cpe:2.3:a:swi-prolog:swi-prolog:5.8.3:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.8.2:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.8.1:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.8.0:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.64:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.63:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.62:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.61:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.59:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.58:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.57:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.56:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.55:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.54:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.53:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.52:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.51:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.6.50:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.4.7:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.2.13:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.10.4:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.10.3:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.10.2:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.10.1:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.10.0:::::::* cpe:2.3:a:swi-prolog:swi-prolog:5.0.10:::::::* cpe:2.3:a:swi-prolog:swi-prolog:4.0.11:::::::* cpe:2.3:a:swi-prolog:swi-prolog:3.4.5:::::::* cpe:2.3:a:swi-prolog:swi-prolog:3.3.10:::::::* cpe:2.3:a:swi-prolog:swi-prolog:3.2.8:::::::* cpe:2.3:a:swi-prolog:swi-prolog:3.1.2:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.9.9:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.9.7:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.9.11:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.8.2:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.7.19:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.7.15:::::::* cpe:2.3:a:swi-prolog:swi-prolog:2.7.14:::::::*	38

OpenVAS Exploits

Date	Description
2012-10-03	Name : Gentoo Security Advisory GLSA 201209-23 (gimp) File : nvt/glsa_201209_23.nasl
2012-08-21	Name : RedHat Update for gimp RHSA-2012:1181-01 File : nvt/gb_RHSA-2012_1181-01_gimp.nasl
2012-08-21	Name : CentOS Update for gimp CESA-2012:1180 centos6 File : nvt/gb_CESA-2012_1180_gimp_centos6.nasl
2012-08-21	Name : CentOS Update for gimp CESA-2012:1181 centos5 File : nvt/gb_CESA-2012_1181_gimp_centos5.nasl
2012-08-21	Name : RedHat Update for gimp RHSA-2012:1180-01 File : nvt/gb_RHSA-2012_1180-01_gimp.nasl
2012-07-30	Name : CentOS Update for gimp CESA-2011:0837 centos4 x86_64 File : nvt/gb_CESA-2011_0837_gimp_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for gimp CESA-2011:0838 centos5 x86_64 File : nvt/gb_CESA-2011_0838_gimp_centos5_x86_64.nasl
2012-07-09	Name : RedHat Update for cups RHSA-2011:1635-03 File : nvt/gb_RHSA-2011_1635-03_cups.nasl
2012-06-06	Name : RedHat Update for gimp RHSA-2011:0839-01 File : nvt/gb_RHSA-2011_0839-01_gimp.nasl
2012-04-02	Name : Fedora Update for pl FEDORA-2011-11229 File : nvt/gb_fedora_2011_11229_pl_fc16.nasl
2012-04-02	Name : Fedora Update for cups FEDORA-2011-11173 File : nvt/gb_fedora_2011_11173_cups_fc16.nasl
2012-04-02	Name : Fedora Update for gimp FEDORA-2011-10761 File : nvt/gb_fedora_2011_10761_gimp_fc16.nasl
2012-03-12	Name : Debian Security Advisory DSA 2426-1 (gimp) File : nvt/deb_2426_1.nasl
2012-02-21	Name : RedHat Update for cups RHSA-2012:0302-03 File : nvt/gb_RHSA-2012_0302-03_cups.nasl
2012-02-12	Name : FreeBSD Ports: FreeBSD File : nvt/freebsd_FreeBSD14.nasl
2012-02-11	Name : Debian Security Advisory DSA 2354-1 (cups) File : nvt/deb_2354_1.nasl
2011-11-08	Name : Mandriva Update for gimp MDVSA-2011:167 (gimp) File : nvt/gb_mandriva_MDVSA_2011_167.nasl
2011-10-21	Name : Mandriva Update for libxfont MDVSA-2011:153 (libxfont) File : nvt/gb_mandriva_MDVSA_2011_153.nasl
2011-10-14	Name : Mandriva Update for cups MDVSA-2011:146 (cups) File : nvt/gb_mandriva_MDVSA_2011_146.nasl
2011-09-23	Name : Ubuntu Update for gimp USN-1214-1 File : nvt/gb_ubuntu_USN_1214_1.nasl
2011-09-21	Name : FreeBSD Ports: libXfont File : nvt/freebsd_libXfont.nasl
2011-09-16	Name : Ubuntu Update for cups USN-1207-1 File : nvt/gb_ubuntu_USN_1207_1.nasl
2011-09-12	Name : Fedora Update for cups FEDORA-2011-11221 File : nvt/gb_fedora_2011_11221_cups_fc14.nasl
2011-09-12	Name : Fedora Update for pl FEDORA-2011-11305 File : nvt/gb_fedora_2011_11305_pl_fc15.nasl
2011-09-12	Name : Fedora Update for pl FEDORA-2011-11318 File : nvt/gb_fedora_2011_11318_pl_fc14.nasl
2011-08-31	Name : Fedora Update for cups FEDORA-2011-11197 File : nvt/gb_fedora_2011_11197_cups_fc15.nasl
2011-08-27	Name : Fedora Update for gimp FEDORA-2011-10782 File : nvt/gb_fedora_2011_10782_gimp_fc14.nasl
2011-08-24	Name : Fedora Update for gimp FEDORA-2011-10788 File : nvt/gb_fedora_2011_10788_gimp_fc15.nasl
2011-08-09	Name : CentOS Update for gimp CESA-2011:0838 centos5 i386 File : nvt/gb_CESA-2011_0838_gimp_centos5_i386.nasl
2011-06-20	Name : Ubuntu Update for gimp USN-1147-1 File : nvt/gb_ubuntu_USN_1147_1.nasl
2011-06-10	Name : Fedora Update for gimp FEDORA-2011-7397 File : nvt/gb_fedora_2011_7397_gimp_fc13.nasl
2011-06-10	Name : Fedora Update for gimp FEDORA-2011-7393 File : nvt/gb_fedora_2011_7393_gimp_fc14.nasl
2011-06-06	Name : RedHat Update for gimp RHSA-2011:0838-01 File : nvt/gb_RHSA-2011_0838-01_gimp.nasl
2011-06-06	Name : RedHat Update for gimp RHSA-2011:0837-01 File : nvt/gb_RHSA-2011_0837-01_gimp.nasl
2011-06-06	Name : CentOS Update for gimp CESA-2011:0837 centos4 i386 File : nvt/gb_CESA-2011_0837_gimp_centos4_i386.nasl
2011-06-03	Name : Mandriva Update for gimp MDVSA-2011:103 (gimp) File : nvt/gb_mandriva_MDVSA_2011_103.nasl
2011-04-19	Name : Ubuntu Update for gimp vulnerabilities USN-1109-1 File : nvt/gb_ubuntu_USN_1109_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
74539	GIMP plug-ins/common/file-gif-load.c LZWReadByte() Function GIF File Handling...
70284	GIMP plug-ins/common/file-psp.c read_channel_data() Function Overflow GIMP is prone to an overflow condition. The 'read_channel_data()' function in 'plug-ins/common/file-psp.c' fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted PSP file, a context-dependent attacker can potentially execute arbitrary code.
70283	GIMP plug-ins/gfig/gfig-style.c gfig_read_parameter_gimp_rgb() Function Overflow GIMP is prone to an overflow condition. The 'gfig_read_parameter_gimp_rgb()' function in 'plug-ins/gfig/gfig-style.c' fails to properly sanitize user-supplied input resulting in a stack-based buffer overflow. With a specially crafted GFIG or XCF file, a context-dependent attacker can potentially execute arbitrary code.
70282	GIMP plug-ins/lighting/lighting-ui.c load_preset_response() Function Overflow GIMP is prone to an overflow condition. The 'load_preset_response()' function in 'plug-ins/lighting/lighting-ui.c' in the 'Lighting Effects' plugin fails to properly sanitize user-supplied input resulting in a stack-based buffer overflow. With a specially crafted file for the plugin, a context-dependent attacker can potentially execute arbitrary code.
70281	GIMP plug-ins/common/sphere-designer.c loadit() Function Overflow GIMP is prone to an overflow condition. The 'loadit()' function in 'plug-ins/common/sphere-designer.c' of the 'Sphere Designer' plugin fails to properly sanitize user-supplied input resulting in a stack-based buffer overflow. With a specially crafted file for the plugin, a context-dependent attacker can potentially execute arbitrary code.

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_gimp-110916.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_gimp-110531.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gimp-110916.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gimp-110531.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gimp-110217.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1181.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1180.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0302.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0839.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0838.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0837.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0838.nasl - Type : ACT_GATHER_INFO
2012-09-29	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201209-23.nasl - Type : ACT_GATHER_INFO
2012-09-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-147.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-1180.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-1181.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1181.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1180.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120820_gimp_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-21	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120820_gimp_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_gimp_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_gimp_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_gimp_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111206_cups_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120221_cups_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-03-07	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2426.nasl - Type : ACT_GATHER_INFO
2012-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0302.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-7775.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gimp-110923.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_cups-110921.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gimp-7543.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gimp-7776.nasl - Type : ACT_GATHER_INFO
2011-12-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1635.nasl - Type : ACT_GATHER_INFO
2011-12-01	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2354.nasl - Type : ACT_GATHER_INFO
2011-11-07	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-167.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cups-7774.nasl - Type : ACT_GATHER_INFO
2011-10-18	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-153.nasl - Type : ACT_GATHER_INFO
2011-10-11	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-146.nasl - Type : ACT_GATHER_INFO
2011-09-23	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1214-1.nasl - Type : ACT_GATHER_INFO
2011-09-15	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1207-1.nasl - Type : ACT_GATHER_INFO
2011-09-12	Name : The remote Fedora host is missing a security update. File : fedora_2011-11229.nasl - Type : ACT_GATHER_INFO
2011-09-12	Name : The remote Fedora host is missing a security update. File : fedora_2011-11221.nasl - Type : ACT_GATHER_INFO
2011-09-09	Name : The remote Fedora host is missing a security update. File : fedora_2011-11305.nasl - Type : ACT_GATHER_INFO
2011-09-09	Name : The remote Fedora host is missing a security update. File : fedora_2011-11318.nasl - Type : ACT_GATHER_INFO
2011-08-31	Name : The remote Fedora host is missing a security update. File : fedora_2011-11173.nasl - Type : ACT_GATHER_INFO
2011-08-29	Name : The remote print service is affected by a buffer overflow vulnerability. File : cups_1_4_7.nasl - Type : ACT_GATHER_INFO
2011-08-29	Name : The remote Fedora host is missing a security update. File : fedora_2011-11197.nasl - Type : ACT_GATHER_INFO
2011-08-23	Name : The remote Fedora host is missing a security update. File : fedora_2011-10761.nasl - Type : ACT_GATHER_INFO
2011-08-23	Name : The remote Fedora host is missing a security update. File : fedora_2011-10782.nasl - Type : ACT_GATHER_INFO
2011-08-20	Name : The remote Fedora host is missing a security update. File : fedora_2011-10788.nasl - Type : ACT_GATHER_INFO
2011-06-14	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1147-1.nasl - Type : ACT_GATHER_INFO
2011-06-09	Name : The remote Fedora host is missing a security update. File : fedora_2011-7397.nasl - Type : ACT_GATHER_INFO
2011-06-07	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gimp-110531.nasl - Type : ACT_GATHER_INFO
2011-06-07	Name : The remote Fedora host is missing a security update. File : fedora_2011-7393.nasl - Type : ACT_GATHER_INFO
2011-06-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0837.nasl - Type : ACT_GATHER_INFO
2011-06-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0838.nasl - Type : ACT_GATHER_INFO
2011-06-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0837.nasl - Type : ACT_GATHER_INFO
2011-06-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0839.nasl - Type : ACT_GATHER_INFO
2011-05-31	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-103.nasl - Type : ACT_GATHER_INFO
2011-05-31	Name : The remote Fedora host is missing a security update. File : fedora_2011-7371.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gimp-110217.nasl - Type : ACT_GATHER_INFO
2011-04-14	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1109-1.nasl - Type : ACT_GATHER_INFO
2011-03-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gimp-7374.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gimp-110307.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:30:53	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	6
Oval ID(s)	14
CPE ID(s)	160
osvdb(s)	5
Openvas Exploit(s)	37
Nessus® Exploit(s)	64

	Related
9.3	CVE-2010-4541
7.5	CVE-2011-1782
7.5	CVE-2010-4543
6.8	CVE-2010-4542
6.8	CVE-2010-4540
5.1	CVE-2011-2896
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)