USN-822-1: KDE-Libs vulnerabilities

It was discovered that KDE-Libs did not properly handle certain malformed SVG images. If a user were tricked into opening a specially crafted SVG image, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. This issue...

[SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1866-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 19, 2009 http://www.debian.org/security/faq -...

Fedora Core 11 FEDORA-2009-8039 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8039. OpenVAS Vulnerability Test $Id: fcore20098039.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8039 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 11 : kdelibs-4.2.4-6.fc11 (2009-8039)

This update fixes several security issues in KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-0945, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, libplasma was fixed to make Plasmaboard a virtual keyboard...

Fedora Core 11 FEDORA-2009-6166 (webkitgtk)

The remote host is missing an update to webkitgtk announced via advisory FEDORA-2009-6166. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 10 FEDORA-2009-8049 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8049. OpenVAS Vulnerability Test $Id: fcore20098049.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8049 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-8049 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8049. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

CentOS Security Advisory CESA-2009:1130 (kdegraphics)

The remote host is missing updates to kdegraphics announced in advisory CESA-2009:1130. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Security fix for the ALT Linux 8 package kde4libs version 4.2.4-alt3

June 29, 2009 Sergey V Turchin 4.2.4-alt3 - CVE-2009-0945, CVE-2009-1690 ALT20633...

RHEL 5 : kdegraphics (RHSA-2009:1130)

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Critical: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Google Chrome < 1.0.154.65 WebKit SVGList Object Handling Memory Corruption

The version of Google Chrome installed on the remote host is earlier than 1.0.154.65. Such versions are reportedly affected by a memory corruption issue. An attacker could exploit this flaw in order to run arbitrary code inside the Google Chrome sandbox. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-0945

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute...

CVE-2009-0945

CVE-2009-0945 is a memory-corruption vulnerability caused by an array index error in WebKit’s insertItemBefore for SVG data structures. The issue allows remote code execution via documents containing a negative index in SVGList structures (SVGTransformList, SVGStringList, SVGNumberList, SVGPathSe...

CVE-2009-0945

Removed by vendor...

Stable Update: Bug fix

Edit 13 May 2009: Disclosing that this release contains the fix for CVE-2009-0945, an issue in WebKit code that also affects Apple's Safari web browser. We did not want to disclose this until Apple's fix for Safari users was released. Google Chrome's Stable channel has been updated to version...

CVE-2008-0945

The CVE-2008-0945 entry concerns Ipswitch Instant Messaging (IM) Server (IMserve/IMserver) 2.0.8.1 and earlier. A format string vulnerability exists in the server’s logging function, allowing remote authenticated users to trigger a denial of service (daemon crash) and possibly other unspecified i...

Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

CVE-2007-0945

CVEs and context : CVE-2007-0945 is a remote code execution vulnerability in Microsoft Internet Explorer’s handling of a property method, leading to potential memory corruption. Affected products span IE 6/7 on Windows XP SP2, Windows 2000 SP4, Windows Server 2003 SP1/SP2, and IE 5.01 SP4 on Wind...

MS07-027: Cumulative Security Update for Internet Explorer (931768)

The remote host is missing the IE cumulative security update 931768. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...