174 matches found
Fedora Update for libpng FEDORA-2010-10592
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : libpng-1.2.44-1.fc13 (2010-10557)
Update to libpng 1.2.44, includes fixes for CVE-2010-1205 and CVE-2010-2249 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row...
CVE-2010-1205
CVE-2010-1205 is a buffer overflow in libpng (pngpread.c) that could allow remote code execution via a crafted PNG image. Affected libpng versions are prior to 1.2.44 and prior to 1.4.3. The overflow is tied to the internal copy in pngpread.c and is described across advisories mentioning memory c...
[slackware-security] libpng
New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libpng-1.4.3-x8664-1slack13.1.txz: Upgraded. Upgraded to libpng-1.2.44...
Security fix for the ALT Linux 5 package libpng version 1.2.44-alt1
June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...
Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1
June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...
CentOS Security Advisory CESA-2009:1205 (httpd)
The remote host is missing updates to httpd announced in advisory CESA-2009:1205. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...
CVE-2008-1205
Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service panic via unspecified vectors...
CVE-2008-1205
Technical details for CVE-2008-1205 are not publicly available in the provided documents. Monitor for updates.
Debian Security Advisory DSA 1205-2 (thttpd)
The remote host is missing an update to thttpd announced via advisory DSA 1205-2. Marco d'Itri discovered that thttpd, a small, fast and secure webserver, makes use of insecure temporary files when its logfiles are rotated, which might lead to a denial of service through a symlink attack. The...
Stack overflow
Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent Agent.Control ActiveX control, which triggers an overflow within the Agent Service agentsrv.exe process, a different issue...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-1205. Reason: This candidate is a duplicate of CVE-2000-1205. Notes: All CVE users should reference CVE-2000-1205 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-4049
CVE-2007-4049 is a duplicate of CVE-2000-1205; the connected records provide the concrete details: XSS in Apache 1.3.0–1.3.11 via printenv CGI (printenv.pl), ap_send_error_response, and related messages, enabling remote script execution for other web visitors. No additional remediation details ar...
CVE-2007-1205
CVE-2007-1205 is a remote code execution vulnerability in Microsoft Agent (msagent\agentsvr.exe) on Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1/SP2. The flaw arises from how Microsoft Agent handles certain specially crafted URLs, leading to memory corruption and arbitrary code e...
Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability
====================================================================== Secunia Research 10/04/2007 - Microsoft Agent URL Parsing Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...
Debian DSA-1205-2 : thttpd - insecure temporary files
The original advisory for this issue didn't contain fixed packages for all supported architectures which are corrected in this update. For reference please find below the original advisory text : Marco d'Itri discovered that thttpd, a small, fast and secure webserver, makes use of insecure...
CVE-2006-1205
CVE-2006-1205 affects myWebland myBloggie 2.1.3 beta and earlier, with multiple reflected XSS flaws in PHP scripts (delcomment.php, upload.php, addcat.php, edituser.php, adduser.php, editcat.php, add.php, deluser.php, delcat.php, del.php) reachable via admin.php. Parameters include confirmredirec...
