ImageMagick security update

CentOS Errata and Security Advisory CESA-2006:178-2 Updated ImageMagick packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X...

Buffer overflow

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2005-4718

CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...

CVE-2005-2712

CVE-2005-2712 affects IBM Lotus Domino LDAP server (nldap.exe) before version 7.0.1, and 6.5.5 and 6.5.4 FP2. A long LDAP bind request can trigger a NULL dereference, causing the service to crash (DoS). Vendor-patched versions include Domino 6.5.5 and 7.0.1 / 6.5.4 FP2; a workaround was described...

CVE-2005-4721

CVE-2005-4721 describes a cross-site scripting (XSS) vulnerability in the tmsPUBLISHER 3.3 product, specifically in the search.cfm component. The issue arises when constructing the query via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided sources co...

CVE-2005-4722

RequestMessage.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message...

CVE-2005-4716

Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX are affected. The CVE describes remote attackers causing denial of service: (1) OpenTP1 system outage via invalid data to a port used by a system-server process, and (2) process failure via invalid data to a port used by certain other proce...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2005-4720

The CVE-2005-4720 entry affects Mozilla Firefox 1.0.7 and earlier on Linux. The issue is triggered by an IFRAME element with a very large WIDTH value, which exposes a bug in floating-point number representation that can cause an infinite loop of widget resizes and an excessive number of function ...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2005-4723

CVE-2005-4723 affects D-Link DI-524, DI-624, and DI-784 routers. The root cause is a vulnerability where a sequence of crafted fragmented UDP packets (potentially involving a missing fragment) can be used to trigger a denial of service, causing the device to reboot. Public descriptions consistent...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service client crash via a certain combination of a malformed HTML file and a CSS file that triggers a null dereferenc...

CVE-2005-4722

CVE-2005-4722 affects tmsPUBLISHER 3.3. The issue arises from _Request_Message.cfm handling an invalid id argument to pagename.cfm, which causes an error message that reveals the installation path. This constitutes an information disclosure vulnerability enabling remote attackers to obtain sensit...

CVE-2005-4719

Sysbotz Systems Panel 1.0.6 and earlier exposes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Exploitable via six parameters across PHP scripts: knowledgebase/index.php (cid), knowledgebase/view.php (aid), contact/update.php (cid), links/ind...

[slackware-security] imagemagick

New imagemagick packages are available for Slackware 10.2 and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-4601 https://vulners.com/cve/CVE-2006-0082 Here are the details from...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-3088 https://vulners.com/cve/CVE-2005-4348...

Slackware 10.0 / 10.1 / 10.2 / current : kdegraphics (SSA:2006-045-04)

New kdegraphics packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix security issues with kpdf. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-045-04. The text...

RHEL 2.1 / 3 / 4 : ImageMagick (RHSA-2006:0178)

Updated ImageMagick packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple image...

CVE-2005-2618

CVE-2005-2618 is a buffer overflow affecting IBM/Lotus Notes components, notably the Attachment Viewer UUE handling and the HTML Speed Reader, exploited via specially crafted UUE files, long ZIP/TAR file names, or long links in emails. The root cause is inadequate boundary checking in these viewe...

CVE-2005-2619

The CVE-2005-2619 issue affects Lotus Notes (6.5.4 and 7.0) using Autonomy/Verity KeyView SDK kvarcve.dll (pre-9.2.0). The vulnerability arises in the preview generation of archives (ZIP, UUE, TAR) where a filename containing .. can lead to directory traversal and deletion of arbitrary files acce...