Gentoo Security Advisory GLSA 200904-19 (littlecms)

The remote host is missing updates announced in advisory GLSA 200904-19. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1769-1 [email protected] http://www.debian.org/security/ Florian Weimer April 11, 2009 http://www.debian.org/security/faq -...

java security update

CentOS Errata and Security Advisory CESA-2009:0377 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide th...

Debian: Security Advisory (DSA-1745-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 9 FEDORA-2009-3034 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-3034. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-2982 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-2982. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 9 FEDORA-2009-2928 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2928. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-2903 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2903. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 1745-1 (lcms)

The remote host is missing an update to lcms announced via advisory DSA 1745-1. OpenVAS Vulnerability Test $Id: deb17451.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1745-1 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.23.b09.fc9 (2009-3034)

lcms in OpenJDK upgraded to 1.18 fixing many related security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

openSUSE 10 Security Update : liblcms (liblcms-6049)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CVE-2009-0581

CVE-2009-0581 affects LittleCMS (liblcms) up to before 1.18beta2. The memory leak can be triggered by crafted image files and is used by Firefox 3.1beta, OpenJDK, and GIMP, potentially causing memory consumption and application crash (DoS). The connected documents corroborate the existence of thi...

[SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1745-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

RedHat Security Advisory RHSA-2009:0339

The remote host is missing updates announced in advisory RHSA-2009:0339. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as...

RHEL 5 : lcms (RHSA-2009:0339)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0339 advisory. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple...

Debian DSA-1745-1 : lcms - several vulnerabilities

Several security issues have been discovered in lcms, a color management library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0581 Chris Evans discovered that lcms is affected by a memory leak, which could result in a denial of service via...

Moderate: Red Hat Security Advisory: lcms security update

Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply "lcms" is a small-footprint,...

lcms security update

1.18-beta1.1.el53.2 - Add patch theoretically preventing division by zero 1.18-beta1.1.el53.1 - Rebase to upstream 1.18beta1 - CVE-2009-0581 LittleCms memory leak - CVE-2009-0723 LittleCms integer overflow - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes - Resolves: 487513...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

CVE-2008-0581

CVE-2008-0581 involves Geert Moernaut LSrunasE and describes a local privilege escalation where a user can obtain the encrypted password from a batch file and then create a modified batch file that uses the /password switch to supply that password and the /command switch to run an arbitrary progr...