PT-2008-1114 · Xfce · Xfce+2

Daichi Kawahata · Publicado 2008-01-09 · Atualizado 2011-03-08 · CVE-2007-6532

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xfce versions prior to 4.4.2 xfce4-panel versions prior to 4.4.2

Description The issue is related to a double free vulnerability in the Widget Library (libxfcegui4) and multiple vulnerabilities in the xfce4-panel package. These vulnerabilities might allow remote attackers to execute arbitrary code or disrupt the confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely.

Recommendations For Xfce versions prior to 4.4.2, update to version 4.4.2 or later. For xfce4-panel versions prior to 4.4.2, update to version 4.4.2 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09619

CVE-2007-6532

Produtos afetados

Xfce

Libxfcegui4

Xfce4-Panel

Referências · 6

• http://vupen.com/english/advisories/2008/0080 · Nota
• http://security.gentoo.org/glsa/glsa-200801-06.xml · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09619 · Nota de Segurança
• http://bugs.gentoo.org/show_bug.cgi?id=201292 · Nota
• http://xfce.org/documentation/changelogs/4.4.2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6532 · Nota de Segurança