Test ID:	1.3.6.1.4.1.25623.1.0.880856
Category:	CentOS Local Security Checks
Title:	CentOS Update for libvorbis CESA-2009:1561 centos4 i386
Summary:	The remote host is missing an update for the 'libvorbis'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'libvorbis' package(s) announced via the referenced advisory. Vulnerability Insight: The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were found in the libvorbis library. A specially-crafted Ogg Vorbis media format file (Ogg) could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened. (CVE-2009-3379) Users of libvorbis should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect. Affected Software/OS: libvorbis on CentOS 4 Solution: Please install the updated packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3379 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 http://www.redhat.com/support/errata/RHSA-2009-1561.html http://secunia.com/advisories/37306 http://secunia.com/advisories/37340 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.ubuntu.com/usn/USN-861-1 http://www.vupen.com/english/advisories/2009/3334
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.