Debian DSA-1221-1 : libgsf - buffer overflow

high Nessus Plugin ID 23743

Synopsis

The remote Debian host is missing a security-related update.

Description

'infamous41md' discovered a heap buffer overflow vulnerability in libgsf, a GNOME library for reading and writing structured file formats, which could lead to the execution of arbitrary code.

Solution

Upgrade the libgsf packages.

For the stable distribution (sarge) this problem has been fixed in version 1.11.1-1sarge1.

See Also

http://www.debian.org/security/2006/dsa-1221

Plugin Details

Severity: High

ID: 23743

File Name: debian_DSA-1221.nasl

Version: 1.17

Type: local

Agent: unix

Published: 11/30/2006

Updated: 1/4/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:libgsf, cpe:/o:debian:debian_linux:3.1

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 11/30/2006

Vulnerability Publication Date: 11/30/2006

Reference Information

DSA: 1221