Lucene search

K
mageiaGentoo FoundationMGASA-2013-0268
HistoryAug 30, 2013 - 9:44 p.m.

Updated libdigidoc packages fix CVE-2013-5648

2013-08-3021:44:17
Gentoo Foundation
advisories.mageia.org
9

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%

Updated libdigidoc packages fix security vulnerability: Fixed one critical bug in the DDOC parsing routines. By persuading a victim to open a specially-crafted DDOC file, a remote attacker could exploit this vulnerability to overwrite arbitrary files on the system with the privileges of the victim (CVE-2013-5648).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchlibdigidoc< 2.7.1.59-1.1libdigidoc-2.7.1.59-1.1.mga2
Mageia3noarchlibdigidoc< 3.6.0.0-3.1libdigidoc-3.6.0.0-3.1.mga3

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%