Ubuntu Security Notice (C) 2013-2014 Canonical, Inc. / NASL script (C) 2013-2014 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Timothy D. Morgan discovered that Raptor would unconditionally load
XML external entities. If a user were tricked into opening a specially
crafted document in an application linked against Raptor, an attacker
could possibly obtain access to arbitrary files on the user's system
or potentially execute arbitrary code with the privileges of the user
invoking the program.
Update the affected libraptor2-0 package.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.7
Public Exploit Available : true