144 matches found
CVE-2009-1671
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...
CVE-2009-1671
Sun Java SE Runtime Environment (JRE) 6 Update 13 includes the deploytk.dll Deployment Toolkit ActiveX control (version 6.0.130.3) that contains multiple buffer-overflow vulnerabilities. A long string argument to methods setInstallerType, setAdditionalPackages, compareVersion, getStaticCLSID, or ...
CVE-2009-1671
creationtimestamp| type| source ---|---|--- 2009-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8665...
Mandriva Linux Security Advisory : kdelibs (MDVSA-2008:097)
A vulnerability was found in startkdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code CVE-2008-1671. By default, startkdeinit is not installed setuid root on Mandriva Linux, however...
Mandriva Update for kdelibs MDVSA-2008:097 (kdelibs)
Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDVSA-2008:097 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for kdelibs MDVSA-2008:097 (kdelibs)
Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDVSA-2008:097 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Ubuntu: Security Advisory (USN-608-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 7.04 / 7.10 / 8.04 LTS : kdelibs vulnerability (USN-608-1)
It was discovered that startkdeinit in KDE 3 did not properly sanitize its input. A local attacker could exploit this to send signals to other processes and cause a denial of service or possibly execute arbitrary code. CVE-2008-1671. Note that Tenable Network Security has extracted the preceding...
openSUSE 10 Security Update : kdelibs3 (kdelibs3-5223)
Startkdeinit did not handle unix signals the right way CVE-2008-1671 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs3-5223. The text description of this plugin is C SUSE LLC...
USN-608-1: KDE vulnerability
It was discovered that startkdeinit in KDE 3 did not properly sanitize its input. A local attacker could exploit this to send signals to other processes and cause a denial of service or possibly execute arbitrary code. CVE-2008-1671...
CVE-2008-1671
startkdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" probably command-line arguments that cause startkdeinit to send SIGUSR1 signals to other processes...
CVE-2008-1671
CVE-2008-1671 affects KDE’s start_kdeinit in KDE 3.5.5–3.5.9 when installed setuid root. A local user can trigger denial of service and, per advisories, potentially execute arbitrary code by supplying input that causes start_kdeinit to send SIGUSR1 to other processes. Connected advisories (Mandri...
CVE-2008-1671
startkdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" probably command-line arguments that cause startkdeinit to send SIGUSR1 signals to other processes...
Slackware 12.0 / current : kdelibs (SSA:2008-116-01)
New kdelibs packages are available for Slackware 12.0 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-116-01. The text itself is copyright C...
[slackware-security] kdelibs
New kdelibs packages are available for Slackware 12.0 and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1671 As well as from the KDE web site:...
CVE-2007-1671
CVE-2007-1671 affects Avira AntiVir: avpack32.dll before 7.3.0.6; a ZOO archive with a direntry pointing to a previous file can cause an infinite loop DoS. The vulnerability stems from ZOO direntry chaining where the next pointer could loop back, leading to 100% CPU utilization on vulnerable host...
CVE-2007-1671
avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...
CVE-2006-1671
CVE-2006-1671 affects Cisco Optical Networking System (ONS) 15000 series nodes prior to 20060405. The issue allows remote denial of service (card reset) via (1) a crafted IP packet to a device with secure mode EMS-to-network-element access, (2) a crafted IP packet to a device with IP on the LAN i...
CVE-2002-1671
Microsoft Internet Explorer versions 5.0, 5.01, and 5.5 are affected by a vulnerability in the clipboardData.getData method that enables remote attackers to monitor the contents of the clipboard. The issue is described across CVE-2002-1671 entries in NVD, CVE List, and related records, consistent...
CVE-2005-1671
The CVE-2005-1671 issue affects Yahoo! Messenger 5.x through 6.0, where the Logfile feature can be activated via a YMSGR: URL. This causes output to be written to a single ypager.log file across multiple users, and there is no proper warning to subsequent users that the feature is enabled, enabli...