drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in libmwaw
Name: |
Pufferüberlauf in libmwaw |
|
ID: |
USN-3319-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 16.10, Ubuntu 17.04 |
|
Datum: |
Do, 15. Juni 2017, 23:22 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9433 |
|
Applikationen: |
libmwaw |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============6728103168734494868== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="JkSWQ6QSAJ0tusHBL0qHxnRh1BceIEFCq"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --JkSWQ6QSAJ0tusHBL0qHxnRh1BceIEFCq Content-Type: multipart/mixed; boundary="IRi11AhE8pKIOoAExKoA2btVpSS8TgIjo"; protected-headers="v1" From: Marc Deslauriers <marc.deslauriers@canonical.com> Reply-To: Ubuntu Security <security@ubuntu.com> To: ubuntu-security-announce@lists.ubuntu.com Message-ID: <432aa7bc-30e4-f44c-9cb1-c9372d6d1316@canonical.com> Subject: [USN-3319-1] libmwaw vulnerability
--IRi11AhE8pKIOoAExKoA2btVpSS8TgIjo Content-Type: text/plain; charset=utf-8 Content-Language: en-C Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-3319-1 June 15, 2017
libmwaw vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.04 - Ubuntu 16.10 - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS
Summary:
libmwaw could be made to crash or run programs as your login if it opened a specially crafted file.
Software Description: - libmwaw: import library for some old Mac text documents
Details:
It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could cause libmwaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.04: libmwaw-0.3-3 0.3.9-1ubuntu0.1
Ubuntu 16.10: libmwaw-0.3-3 0.3.8-2ubuntu0.1
Ubuntu 16.04 LTS: libmwaw-0.3-3 0.3.7-1ubuntu2.1
Ubuntu 14.04 LTS: libmwaw-0.1-1 0.1.11-1ubuntu1.1
In general, a standard system update will make all the necessary changes.
References: https://www.ubuntu.com/usn/usn-3319-1 CVE-2017-9433
Package Information: https://launchpad.net/ubuntu/+source/libmwaw/0.3.9-1ubuntu0.1 https://launchpad.net/ubuntu/+source/libmwaw/0.3.8-2ubuntu0.1 https://launchpad.net/ubuntu/+source/libmwaw/0.3.7-1ubuntu2.1 https://launchpad.net/ubuntu/+source/libmwaw/0.1.11-1ubuntu1.1
--IRi11AhE8pKIOoAExKoA2btVpSS8TgIjo--
--JkSWQ6QSAJ0tusHBL0qHxnRh1BceIEFCq Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iQIcBAEBCgAGBQJZQqbvAAoJEGVp2FWnRL6To5EQAIgDdACKM15uPtFThx9wcA98 B+xTcRtnH4wfYk1UgDsh4XsCZjUNFE0ibjRP3n98qGkYMoSYThJ6j775S6uJeROr jSduzlmejXk/urErG2Wuiw7MJU/Jee4Ealh7gPeUEKuKSoBWArtuSd3a9OwfrVfG Q/Dw3NOeAh4xaxwMKRSg4BuR4vD5sMhX4l3YQu9C/ABu9dxrvl/8tOF1WLP/tX/s dfr6QIW+yoysR2YAoUt6A2VwzhULqe0KjF4OanyKKu4oikFVsa4YLB7GID4cFzG9 zU3MnshNO8qHHcU6SwlEJsi44v/Z5EZc2+JIsHQC6Ll60TA1RP7ap+6a9ZlP6S0q YnCKpqz3wEDTWtP/E5v2/RM2p4VR/R+7JY6psPwD/MxbyJt96FCVWlG+elcZ7SUJ vccrMukfugrDhEPveEz0QqCdbXImKqCylMMqn054ptxueUaW4ceuMXwxkp/mnPot lRUCcDFOp0opDOqDRFK+B+Ijtn0iQj/5xmubKdrdLmXpcsmxTs0j+COfJFSC1bqF b1yXCcn/V6Yul3+jP+fiGG5o22WNpBsHYnqDLwtdCGHK7n+uThlpSPVRzs4eR3QZ jwIkv8gtTrr+hs3tqg34WaIS8pgPld2wxBKKpQFioA5Cace1Ru1ykIjeoo5QCF8Z e2oJrwjNCfccSezTJ1Ri =AcMn -----END PGP SIGNATURE-----
--JkSWQ6QSAJ0tusHBL0qHxnRh1BceIEFCq--
--===============6728103168734494868== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============6728103168734494868==--
|
|
|
|