BDU:2015-03678

Опубликовано: 01 янв. 2015

Источник: fstec

CVSS2: 6.8

EPSS Низкий

Описание

Множественные уязвимости пакета libpango1-ruby операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 4 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,8)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 4:

ppc:

librsvg2-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

s390x:

libgconf2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

i686:

libatk1-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

hppa:

libglib2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

sparc:

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

x86-64:

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

alpha:

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

ia64:

libgtk2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

mips:

libart2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

noarch:

ruby-gnome2 - 0.15.0-1.1etch1

mipsel:

libvte-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

libgtkhtml2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgtkglext1-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libpango1-ruby - 0.15.0-1.1etch1

libgda2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

arm:

libgtk-mozembed-ruby - 0.15.0-1.1etch1

libglade2-ruby - 0.15.0-1.1etch1

libatk1-ruby - 0.15.0-1.1etch1

libgtksourceview1-ruby - 0.15.0-1.1etch1

libgstreamer0.8-ruby - 0.15.0-1.1etch1

libgconf2-ruby - 0.15.0-1.1etch1

libgtk2-ruby - 0.15.0-1.1etch1

libgnomeprint2-ruby - 0.15.0-1.1etch1

libart2-ruby - 0.15.0-1.1etch1

libgnomevfs2-ruby - 0.15.0-1.1etch1

libgnomeprintui2-ruby - 0.15.0-1.1etch1

libglib2-ruby - 0.15.0-1.1etch1

librsvg2-ruby - 0.15.0-1.1etch1

libgdk-pixbuf2-ruby - 0.15.0-1.1etch1

libgnomecanvas2-ruby - 0.15.0-1.1etch1

libvte-ruby - 0.15.0-1.1etch1

libpanel-applet2-ruby - 0.15.0-1.1etch1

libgnome2-ruby - 0.15.0-1.1etc

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 85%

0.02542

Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2007-6183

ubuntu

почти 18 лет назад

Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.