85 matches found
CVE-2010-1878
Directory traversal vulnerability in the OrgChart comorgchart component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
CVE-2010-1878
creationtimestamp| type| source ---|---|--- 2010-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12317...
Debian DSA-1878-1 : devscripts - missing input sanitation
Raphael Geissert discovered that uscan, a program to check for availability of new source code versions which is part of the devscripts package, runs Perl code downloaded from potentially untrusted sources to implement its URL and version mangling functionality. This update addresses this issue b...
Debian devscripts软件包uscan远程代码执行漏洞
BUGTRAQ ID: 36227 CVECAN ID: CVE-2009-2946 Debian是一个流行的Linux发行版本。 uscan是Debian的devscripts软件包中所提供的程序，用于检测是否有新的源码版本可用。uscan运行了从不可信任来源下载的Perl代码实现URL与版本的重整功能，如果源码的发布服务器使用了恶意的路径名就会导致注入并执行任意Perl代码。 Debian devscripts 2.9.26 Debian devscripts 2.9.25 Debian devscripts 2.10.35 厂商补丁： Debian ------...
Debian Security Advisory DSA 1878-2 (devscripts)
The remote host is missing an update to devscripts announced via advisory DSA 1878-2. OpenVAS Vulnerability Test $Id: deb18782.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1878-2 devscripts Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-1878
CVE-2009-1878 describes a session fixation vulnerability affecting Adobe ColdFusion 8.0.1 and earlier. The issue allows remote attackers to hijack web sessions via unspecified vectors. Provided records confirm the affected software version range and the high-level impact (session hijacking), but ...
Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:177)
Guido Landi found A stack-based buffer overflow in xine-lib that could allow a remote attacker to cause a denial of service crash and potentially execute arbitrary code via a long NSF title CVE-2008-1878. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...
Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)
Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for xine-lib MDVSA-2008:177 (xine-lib)
Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:177 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for xine-lib FEDORA-2008-3353
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for xine-lib FEDORA-2008-7572
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Gentoo Security Advisory GLSA 200808-01 (xine-lib)
The remote host is missing updates announced in advisory GLSA 200808-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1586-1 : xine-lib - multiple vulnerabilities
Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...
DSA-1586-1 xine-lib - multiple vulnerabilities
Bulletin has no description...
openSUSE 10 Security Update : xine-devel (xine-devel-5204)
Specially crafted NSF files could potentially be exploited to execute arbitrary code CVE-2008-1878. Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code CVE-2008-1686. %NASLMINLEVEL 70300 C Tenable Network Security,...
SuSE 10 Security Update : xine-lib (ZYPP Patch Number 5205)
Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...
Fedora 7 : xine-lib-1.1.11.1-1.fc7.2 (2008-3326)
Bug 442882 - CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Stack overflow
Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the...
CVE-2008-1878
CVE-2008-1878 is a stack-based buffer overflow in xine-lib (demux_nsf_send_chunk in src/demuxers/demux_nsf.c) that allows a remote attacker to crash the application and potentially execute arbitrary code via a long NSF title, affecting xine-lib 1.1.12 and earlier. Public advisories across distrib...