Ubuntu Update for texlive-bin vulnerabilities USN-937-1

Ubuntu Update for Linux kernel vulnerabilities USN-937-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9371.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for texlive-bin vulnerabilities USN-937-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

RedHat Update for tetex RHSA-2010:0401-01

Check for the Version of tetex OpenVAS Vulnerability Test RedHat Update for tetex RHSA-2010:0401-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : texlive-bin vulnerabilities (USN-937-1)

It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and...

USN-937-1: TeX Live vulnerabilities

It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and...

tetex security update

3.0-33.8.el5.5 - unify patches for CVE-2010-0739 and CVE-2010-1440 3.0-33.8.el5.4 - fix CVE-2010-1440 586819 3.0-33.8.el5.3 - initialize data in arithmetic coder elsewhere CVE-2009-0146 3.0-33.8.el5.2 - initialize dataLen to properly fix CVE-2009-0146 3.0-33.8.el5.1 - fix CVE-2010-0739...

tetex security update

2.0.2-22.EL4.16 - fix last changelog entry 2.0.2-22.EL4.15 - unify patches for CVE-2010-0739 and CVE-2010-1440 2.0.2-22.EL4.14 - add missing check in the first hunk in Stream.cc for CVE-2009-0791 2.0.2-22.EL4.13 - add another hunk to CVE-2010-0827 patch to fix tfmload.c as well...

GLSA-200909-06 : aMule: Parameter injection

The remote host is affected by the vulnerability described in GLSA-200909-06 aMule: Parameter injection Sam Hocevar discovered that the aMule preview function does not properly sanitize file names. Impact : A remote attacker could entice a user to download a file with a specially crafted file nam...

[SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1821-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 22, 2009 http://www.debian.org/security/faq -...

Debian DSA-1821-1 : amule - insufficient input sanitising

Sam Hocevar discovered that amule, a client for the eD2k and Kad networks, does not properly sanitise the filename, when using the preview function. This could lead to the injection of arbitrary commands passed to the video player. The oldstable distribution etch is not affected by this issue...

[SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1821-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 22, 2009 http://www.debian.org/security/faq -...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

DEBIAN-CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

CVE-2009-1440

CVE-2009-1440 affects amule (eD2k/Kademlia client); the vulnerability is an incomplete blacklist in DownloadListCtrl.cpp that lets a remote attacker craft a filename to inject arguments into the user’s video player. Advisories (Debian DSA-1821-1, Gentoo GLSA-200909-06, OpenVAS, Nessus plugins) co...

CVE-2009-1440

Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...

Gentoo Security Advisory GLSA 200408-04 (PuTTY)

The remote host is missing updates announced in advisory GLSA 200408-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft Windows PGM报文多个拒绝服务漏洞（MS08-036）

BUGTRAQ ID: 29508,29509 CVECAN ID: CVE-2008-1440,CVE-2008-1441 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的实际通用多播（PGM）协议实现中存在多个拒绝服务漏洞，如果远程攻击者发送了带有无效长度的PGM报文，或PGM畸形碎片的话，就可能导致系统停止响应。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Window...

CVE-2008-1440

CVE-2008-1440 is a Windows DoS vulnerability in Pragmatic General Multicast (PGM) caused by improper validation of the PGM option length field. A remote attacker can trigger an infinite loop by sending a crafted PGM packet, rendering affected systems non-responsive and requiring a restart. Affect...

Microsoft Windows PGM Packet Handling Denial of Service (MS08-036; CVE-2008-1440)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly validate the option field length of a PGM packet....

Debian: Security Advisory (DSA-1440-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1440

SpamProbe 0.8a is affected: remote DoS via HTML e-mail containing newline characters inside an href tag, due to how certain regular expressions are not handling this input. The root cause is the incorrect handling of newlines in href attributes. Impact is described as a crash/partial availability...