Important: rpm

Issue Overview: Multiple flaws were found in the way RPM parsed package file headers. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library such as the rpm...

RedHat Update for rpm RHSA-2012:0451-01

Check for the Version of rpm OpenVAS Vulnerability Test RedHat Update for rpm RHSA-2012:0451-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

rpm security update

4.8.0-19.1 - Proper region tag validation on package/header read CVE-2012-0060 - Double-check region size against header size CVE-2012-0061 - Validate negated offsets too in headerVerifyInfo CVE-2012-0815...

ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability

ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-038 April 2, 2010 -- CVE ID: CVE-2010-0060 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

QuickTime < 7.6.6 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.6. Such versions contain several vulnerabilities : - A memory corruption issue in QuickTime's handling of QDM2 encoded audio content may lead to an application crash or arbitrary code execution. CVE-2010-0059 - A...

CVE-2010-0060

CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted audio content with QDMC encoding...

CVE-2010-0060

CVE-2010-0060 affects Apple Mac OS X CoreAudio prior to 10.6.3, where parsing of crafted QDMC-encoded audio content can cause memory corruption and allow remote code execution or a denial of service. The vulnerability is tied to the QuickTime/CoreAudio pathway and can be triggered by a malformed ...

CVE-2008-0060

Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:topiclist URL that injects HTML or JavaScript into a topic list page, as demonstrated using a help:runscript link...

CVE-2008-0060

CVE-2008-0060 affects Apple Mac OS X 10.4.11 and 10.5.2. The issue in Help Viewer allows remote attackers to execute arbitrary Applescript by exploiting a crafted help:topic_list URL that injects HTML or JavaScript into a topic list page, demonstrated via a help:runscript link. This vulnerability...

CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow

The remote version of CA Message Queuing Service contains a stack overflow that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. vendor advisory: Affected...

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

CVE-2007-0060

CA CVE-2007-0060 affects CA Message Queuing (CAM/CAFT) Server. A stack-based buffer overflow in CAM/CAFT before version 1.11 Build 54_4 on Windows/NetWare allows remote code execution by sending a crafted message to TCP port 3104. Impact described as remote arbitrary code execution with potential...

RHEL 3 / 4 : samba (RHSA-2007:0060)

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service flaw was found in...

CentOS 3 / 4 : samba (CESA-2007:0060)

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service flaw was found in...

CVE-2005-0060

CVE-2005-0060 is a local privilege-elevation vulnerability in the Windows font-processing subsystem caused by an unchecked buffer when handling certain fonts. A logged-on user could gain full control of an affected system by running a specially crafted application. Affected platforms include Wind...

CVE-2004-0060

CVE-2004-0060 affects WWW File Share Pro 2.42 and earlier. The vulnerability allows a remote attacker to trigger a denial-of-service (crash) via a large POST request sent over the network. The connected documents confirm the affected product and the impact (DoS via crafted POST size), but do not ...

CVE-2004-0060

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2003-0060

Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in Kerberos principal names...

CVE-2003-0060

Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in Kerberos principal names...

CVE-2003-0060

CVE-2003-0060 describes a format-string vulnerability in the MIT Kerberos V5 KDC logging routines prior to version 1.2.5. The issue allows remote attackers to trigger a denial of service (crash) and, potentially, to execute arbitrary code via format string specifiers in Kerberos principal names. ...