CentOS 3 / 4 : cvs (CESA-2005:387)

An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes...

CVE-2006-0753

CVE-2006-0753 is a memory leak/DoS issue in Microsoft Internet Explorer 6 on Windows XP SP2 caused by JavaScript using setInterval to repeatedly set window.status, leading to stack exhaustion in the Script Engine. Connected advisory CPAI-2006-160 confirms a stack-exhaustion path and DoS outcome. ...

Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)

A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image...

Moderate: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes...

RHEL 4 : cvs (RHSA-2005:387)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:387 advisory. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes version and author...

CVE-2005-0753

CVE-2005-0753 affects CVS (Concurrent Versions System). A buffer overflow in CVS processing of version/author information can allow remote code execution when a user connects to a malicious CVS server. Public advisories confirm a patch is available; Debian/FreeBSD/CentOS advisories document fixes...

DEBIAN-CVE-2005-0753

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code...

SUSE-SA:2005:024: cvs

The remote host is missing the patch for the advisory SUSE-SA:2005:024 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. The current maintainer of CVS reported various problems within CVS such as a buffer overflow and memory...

[Full-disclosure] SUSE Security Announcement: cvs (SUSE-SA:2005:024)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: cvs Announcement-ID: SUSE-SA:2005:024 Date: Monday, Apr 18st 2005 13:30 MEST Affected products: 8.2, 9.0, 9.1, 9.2, 9.3 SUSE CORE 9 for x86 SuSE Linux Enterprise Server 8, 9 UnitedLinux 1.0 School-Server 1 Open-Enterprise-Serv...

Security fix for the ALT Linux 5 package cvs version 1.11.19-alt1

April 6, 2005 Dmitry V. Levin 1.11.19-alt1 - Updated to 1.11.19. - Updated patches. - Applied upstream security fixes for CAN-2005-0753 issue...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

CVE-2004-0753

The vulnerability CVE-2004-0753 affects the BMP image processing path in gdk-pixbuf (before 0.22) and GTK+ gtk2 (before 2.2.4), where a crafted BMP file can trigger an infinite loop and cause a remote denial of service. Public records from multiple advisories corroborate affected packages and pro...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

RHEL 2.1 / 3 : gdk-pixbuf (RHSA-2004:447)

Updated gdk-pixbuf packages that fix several security flaws are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. Updated 15th September 2004 Packages have been updated to correct a bug which caused the xpm loader to fail. During...

Fedora Core 1 : gdk-pixbuf-0.22.0-11.2.2 (2004-286)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gdk-pixbuf. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by...

Fedora Core 2 : gdk-pixbuf-0.22.0-11.2.3 (2004-287)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gdk-pixbuf. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by...

Fedora Core 2 : gtk2-2.4.7-2.4 (2004-289)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...