RedHat Update for frysk RHSA-2011:1327-01. A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping engine used in the embedded Pango library. Users of frysk are advised to upgrade to this updated package, which contains a backported patch to correct this issue
Reporter | Title | Published | Views | Family All 93 |
---|---|---|---|---|
![]() | CentOS Update for pango CESA-2011:1326 centos5 x86_64 | 30 Jul 201200:00 | – | openvas |
![]() | Oracle: Security Advisory (ELSA-2011-1326) | 6 Oct 201500:00 | – | openvas |
![]() | CentOS Update for pango CESA-2011:1326 centos5 i386 | 23 Sep 201100:00 | – | openvas |
![]() | CentOS Update for frysk CESA-2011:1327 centos4 i386 | 23 Sep 201100:00 | – | openvas |
![]() | CentOS Update for pango CESA-2011:1326 centos5 i386 | 23 Sep 201100:00 | – | openvas |
![]() | CentOS Update for evolution28-pango CESA-2011:1325 centos4 i386 | 23 Sep 201100:00 | – | openvas |
![]() | CentOS Update for evolution28-pango CESA-2011:1325 centos4 x86_64 | 30 Jul 201200:00 | – | openvas |
![]() | RedHat Update for frysk RHSA-2011:1327-01 | 23 Sep 201100:00 | – | openvas |
![]() | RedHat Update for evolution28-pango RHSA-2011:1325-01 | 23 Sep 201100:00 | – | openvas |
![]() | RedHat Update for pango RHSA-2011:1326-01 | 23 Sep 201100:00 | – | openvas |
###############################################################################
# OpenVAS Vulnerability Test
#
# RedHat Update for frysk RHSA-2011:1327-01
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
include("revisions-lib.inc");
tag_insight = "frysk is an execution-analysis technology implemented using native Java and
C++. It provides developers and system administrators with the ability to
examine and analyze multi-host, multi-process, and multithreaded systems
while they are running. frysk is released as a Technology Preview for Red
Hat Enterprise Linux 4.
A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping
engine used in the embedded Pango library. If a frysk application were used
to debug or trace a process that uses HarfBuzz while it loaded a
specially-crafted font file, it could cause the application to crash or,
possibly, execute arbitrary code with the privileges of the user running
the application. (CVE-2011-3193)
Users of frysk are advised to upgrade to this updated package, which
contains a backported patch to correct this issue. All running frysk
applications must be restarted for this update to take effect.";
tag_affected = "frysk on Red Hat Enterprise Linux AS version 4,
Red Hat Enterprise Linux ES version 4,
Red Hat Enterprise Linux WS version 4";
tag_solution = "Please Install the Updated Packages.";
if(description)
{
script_xref(name : "URL" , value : "https://www.redhat.com/archives/rhsa-announce/2011-September/msg00039.html");
script_id(870488);
script_tag(name:"cvss_base", value:"9.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
script_version("$Revision: 6685 $");
script_tag(name:"last_modification", value:"$Date: 2017-07-12 11:44:46 +0200 (Wed, 12 Jul 2017) $");
script_tag(name:"creation_date", value:"2011-09-23 16:39:49 +0200 (Fri, 23 Sep 2011)");
script_xref(name: "RHSA", value: "2011:1327-01");
script_cve_id("CVE-2011-3193");
script_name("RedHat Update for frysk RHSA-2011:1327-01");
script_summary("Check for the Version of frysk");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (c) 2011 Greenbone Networks GmbH");
script_family("Red Hat Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/rhel", "ssh/login/rpms");
script_tag(name : "affected" , value : tag_affected);
script_tag(name : "solution" , value : tag_solution);
script_tag(name : "insight" , value : tag_insight);
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("pkg-lib-rpm.inc");
release = get_kb_item("ssh/login/release");
res = "";
if(release == NULL){
exit(0);
}
if(release == "RHENT_4")
{
if ((res = isrpmvuln(pkg:"frysk", rpm:"frysk~0.0.1.2007.08.03~8.el4", rls:"RHENT_4")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"frysk-debuginfo", rpm:"frysk-debuginfo~0.0.1.2007.08.03~8.el4", rls:"RHENT_4")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99); # Not vulnerable.
exit(0);
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo