[USN-1142-1] GDM vulnerability

========================================================================== Ubuntu Security Notice USN-1142-1 June 01, 2011 gdm vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

openSUSE Security Update : kdegraphics3 (openSUSE-SU-2010:1035-1)

Various pointer dereferencing vulnerabilities in kdegraphics3's KSVG have been fixed. CVE-2009-1709 and CVE-2009-0945 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Mandriva Update for kdegraphics MDVSA-2010:182 (kdegraphics)

Check for the Version of kdegraphics OpenVAS Vulnerability Test Mandriva Update for kdegraphics MDVSA-2010:182 kdegraphics Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Linux Security Advisory : kdegraphics (MDVSA-2010:182)

A vulnerability has been found and corrected in kdegraphics ksvg : Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service heap corruption and application...

CVE-2010-1709

The CVE-2010-1709 entry pertains to multiple XSS vulnerabilities in the upload.cgi handler of G5-Scripts Auto-Img-Gallery 1.1. The underlying issue is input handling in the upload.cgi script, allowing an attacker to inject arbitrary web script or HTML via the (1) user and (2) pass parameters. Aff...

Debian DSA-1866-1 : kdegraphics - several vulnerabilities

Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0945 It was discovered that the KSVG animation element implementation suffers from a NULL point...

Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt4

Dec. 24, 2009 Sergey V Turchin 3.5.10-alt4 - update to lastest branch 3.5 - Security fixes: - CVE-2009-0945 - CVE-2009-1709...

Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian Security Advisory DSA 1866-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1866-1. OpenVAS Vulnerability Test $Id: deb18661.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1866-1 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1866-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 19, 2009 http://www.debian.org/security/faq -...

CentOS Security Advisory CESA-2009:1130 (kdegraphics)

The remote host is missing updates to kdegraphics announced in advisory CESA-2009:1130. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RHEL 5 : kdegraphics (RHSA-2009:1130)

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Critical: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Apple Safari Multiple Vulnerabilities June-09 (Windows) - I

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...

CVE-2009-1709

CVE-2009-1709 is a use-after-free in KDE kdegraphics3/ KSVG animation element (as cited in openSUSE/SUSE advisories and Scientific Linux) that could allow a remote attacker to cause a denial of service (Konqueror crash) or potentially execute arbitrary code when processing crafted SVG images. Rel...

Debian: Security Advisory (DSA-1709-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1709-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1709-1. OpenVAS Vulnerability Test $Id: deb17091.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1709-1 shadow Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1709-1 : shadow - race condition

Paul Szabo discovered that login, the system login tool, did not correctly handle symlinks while setting up tty permissions. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

CVE-2008-1709

CVE-2008-1709 describes a buffer overflow in Microsoft Visual InterDev 6.0 (SP6) that allows user-assisted execution of arbitrary code via a Studio Solution (.SLN) file containing a long malformed Project line (Project("{}")== sequence). The connected documents corroborate the vulnerability famil...