222 matches found
CVE-2009-0196
Heap-based buffer overflow in the big2decodesymboldict function jbig2symboldict.c in the JBIG2 decoding library jbig2dec in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run...
CVE-2009-0196
CVE-2009-0196 describes a heap-based buffer overflow in Ghostscript’s JBIG2 decoding path. The vulnerability resides in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) within the JBIG2 decoding library (jbig2dec) and affects Ghostscript 8.64 and probably earlier versions. A specially c...
CVE-2009-0196
Heap-based buffer overflow in the big2decodesymboldict function jbig2symboldict.c in the JBIG2 decoding library jbig2dec in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run...
RedHat Security Advisory RHSA-2009:0421
The remote host is missing updates announced in advisory RHSA-2009:0421. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
RedHat Security Advisory RHSA-2009:0421
The remote host is missing updates announced in advisory RHSA-2009:0421. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
Moderate: Red Hat Security Advisory: ghostscript security update
Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScript interpreter, a set of C...
ghostscript security update
8.15.2-9.4:.7 - Added extra checking for CVE-2009-0792 bug 491853. 8.15.2-9.4:.6 - Applied patch to fix gdevpdtb buffer overflow bug 493445. - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853. - Applied patch to fix CVE-2009-0196 bug 493379...
Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow
====================================================================== Secunia Research 09/04/2009 - Ghostscript jbig2dec JBIG2 Processing Buffer Overflow - ====================================================================== Table of Contents Affected...
RedHat Update for unzip RHSA-2008:0196-01
Check for the Version of unzip OpenVAS Vulnerability Test RedHat Update for unzip RHSA-2008:0196-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
CVE-2008-0196
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. dot dot in 1 the page parameter to certain PHP scripts under wp-admin/ or 2 the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path...
CVE-2007-0196
CVE-2007-0196: SQL injection in admin_check_user.asp of Motionborg Web Real Estate 2.1 and earlier allows remote command execution via the username field (txtUserName) and possibly other parameters. Affects the vulnerable web app with network access; CVSS v2 base score 7.5 (HIGH). Impact: partial...
CVE-2003-0196
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201...
CVE-2003-0196
CVE-2003-0196 corresponds to multiple buffer overflows in Samba before 2.2.8a, enabling remote code execution or denial of service. The related CVE-2003-0201 describes a trans2open overflow; exploitation has been demonstrated in various Samba builds (2.2.0–2.2.8) across platforms (Linux, macOS, B...
CVE-2002-0196
The CVE-2002-0196 entry concerns ACD Incorporated CwpAPI 1.1. The vulnerability lies in GetRelativePath, which only checks if the server root is somewhere within the path rather than strictly preventing access beyond the web root. As a result, remote attackers could read or write files outside th...
CVE-2002-0196
GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root...
CVE-2002-0196
GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root...
CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group...
CVE-2001-0196
The CVE-2001-0196 issue affects the inetd ident service in FreeBSD 4.x and earlier. The root cause is improper setting of group permissions, which can allow remote attackers to read the first 16 bytes of files accessible by the wheel group. Impact is partial confidentiality loss for wheel-group f...