Enterprise Threat Management for Your Dynamic IT Infrastructure
For today's dynamic enterprise, IT teams can no longer manage multiple consoles and applications...
The operating system (OS), which runs applications on top of physical infrastructure, has served as the foundation of traditional IT for decades. The OS...
Package : mozilla
Vulnerability : programming error
Problem type : remote
Debian-specific: no
CVE ID : CVE-2006-1993
CERT advisory : VU#866300
BugTraq ID : 17671
Martijn Wargers and Nick Mott described crashes of Mozilla due
to the use of a deleted controller context. In theory this could be
abused to execute malicious code.
For the stable distribution (sarge) this problem has been fixed
in version 1.7.8-1sarge6.
For the unstable distribution (sid) this problem will be fixed
soon.
We recommend that you upgrade your mozilla packages.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Package : tiff
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE IDs : CAN-2006-2024 CAN-2006-2025 CAN-2006-2026
BugTraq IDs : 17730 17732 17733
Tavis Ormandy discovered several vulnerabilities in the TIFF
library that can lead to a denial of service or the execution of
arbitrary code. The Common Vulnerabilities and Exposures project
identifies the following problems:
CVE-2006-2024
Multiple vulnerabilities allow attackers to cause a denial of
service.
CVE-2006-2025
An integer overflows allows attackers to cause a denial of
service and possibly execute arbitrary code.
CVE-2006-2026
A double-free vulnerability allows attackers to cause a denial
of service and possibly execute arbitrary code.
For the old stable distribution (woody) these problems have been
fixed in version 3.5.5-7woody1.
For the stable distribution (sarge) these problems have been
fixed in version 3.7.2-3sarge1.
For the unstable distribution (sid) these problems will be fixed
soon.
We recommend that you upgrade your libtiff packages.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
