Fedora Core 3 : thunderbird-1.0.2-1.3.1 (2005-247)

A buffer overflow bug was found in the way Thunderbird processes GIF images. It is possible for an attacker to create a specially crafted GIF image, which when viewed by a victim will execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned...

Fedora Core 3 : xorg-x11-6.8.2-1.FC3.13 (2005-273)

An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and...

Fedora Core 3 : HelixPlayer-1.0.3-3.fc3 (2005-188)

Updated HelixPlayer packages that fixes two buffer overflow issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. A stack based buffer overflow bug was found in HelixPlayer's Synchronized Multimedia Integration Language SMIL...

Debian DSA-806-1 : gcvs - insecure temporary files

Marcus Meissner discovered that the cvsbug program from gcvs, the Graphical frontend for CVS, which serves the popular Concurrent Versions System, uses temporary files in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

RHEL 4 : pcre (RHSA-2005:761)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:761 advisory. PCRE is a Perl-compatible regular expression library. An integer overflow flaw was found in PCRE, triggered by a maliciously crafted regular expressio...

Fedora Core 3 : php-4.3.11-2.4 (2005-315)

This update includes the latest stable release of PHP 4.3, including a number of security fixes to the exif extension CVE-2005-1042 and CVE-2005-1043 and the getimagesize function CVE-2005-0524, along with many bug fixes. Note that Tenable Network Security has extracted the preceding description...

RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005:769)

An updated mozilla package that fixes a security bug is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found...

Fedora Core 2 : gaim-1.1.3-1.FC2 (2005-159)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC2 - FC2 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

Fedora Core 3 : ipsec-tools-0.5-2.fc3 (2005-217)

This update fixes a potential DoS in parsing ISAKMP headers in racoon. CVE-2005-0398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Core 3 : openoffice.org-1.1.3-11.5.0.fc3 (2005-316)

This update fixes many International Input issues with the IIIMF input framework, and also fixes the CVE-2005-0941 security issue recently made public. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempte...

Fedora Core 3 : kdelibs-3.3.1-2.9.FC3 (2005-245)

Wed Mar 23 2005 Than Ngo 6:3.3.1-2.9.FC3 - Applied patch to fix konqueror international domain name spoofing, CVE-2005-0237, 147405 - get rid of broken AltiVec instructions on ppc - Wed Mar 2 2005 Than Ngo 6:3.3.1-2.8.FC3 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150092 thanks KDE security...

Fedora Core 3 : php-4.3.11-2.7 (2005-809)

This update includes the latest upstream version of the PEAR XMLRPC package, which fixes a security issue in request parsing in the XMLRPC Server code. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-2498 to this issue. Note that Tenable Network...

RHEL 4 : cvs (RHSA-2005:756)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:756 advisory. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is possible that a loc...

Fedora Core 3 : gdk-pixbuf-0.22.0-16.fc3 (2005-266)

David Costanzo found a bug in the way gdk-pixbuf processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name...

Fedora Core 2 : squid-2.5.STABLE8-1.FC2.1 (2005-153)

This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora Core 3 : squid-2.5.STABLE8-1.FC3.1 (2005-154)

This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora Core 3 : gftp-2.0.18-0.FC3 (2005-309)

Fri Feb 18 2005 Warren Togami 2.0.18-0.FC3 - FC3 including CVE-2005-0372 - Thu Feb 10 2005 Warren Togami 2.0.18-1 - 2.0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:769-01 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-September/074319.html Affected packages: mozilla mozilla-chat mozilla-devel mozilla-dom-inspector mozilla-js-debugger mozilla-mail mozilla-nspr...

CVE-2005-2873

Technical details for CVE-2005-2873 are not provided in the connected documents. Available sources reference related CVEs and kernel updates but do not specify affected product/version, root cause, or remediation for this CVE.

CVE-2005-2871

CVE-2005-2871 describes a heap-based buffer overflow in IDN handling (soft-hyphen 0xAD) during Mozilla Firefox IDN normalization (nsStandardURL::BuildNormalizedSpec). Affects Firefox 1.0.6 and earlier, and Netscape 7.x/8.x. Exploitation could crash the browser or run arbitrary code; remote attack...