Tex Live bbdospecial()函数整数溢出漏洞

BUGTRAQ ID: 39966 CVECAN ID: CVE-2010-1440 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的bbdospecial函数中存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致执行任意代码。 TeX Live 2009 TeX Live 2008 TeX Live 2007 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2010:0401-01）以及相应补丁: RHSA-2010:0401-01：Moderate:...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

Mac OS X 10.5.2 Update / Mac OS X Security Update 2008-001

The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

Mac OS X 10.5.1 Update

The remote host is missing Mac OS X 10.5.1 Update. One or more of the following components are affected: Application Firewall OpenVAS Vulnerability Test Mac OS X 10.5.1 Update LSS-NVT-2010-018 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribute ...

Mac OS X 10.5.1 Security Update (HT2169)

The remote host is missing Mac OS X 10.5.1 Update. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

RHEL 4 / 5 : tar (RHSA-2010:0141)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0141 advisory. - tar/cpio stack crashing in safernamesuffix CVE-2007-4476 - tar, cpio: Heap-based buffer overflow by expanding a specially-crafted...

RHEL 3 : tetex (RHSA-2010:0401)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 4 : tetex (CESA-2010:0399)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 3 : tetex (CESA-2010:0401)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2007-5107

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16557 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/askshortformat.rb 2025-02-06 03:13:38+00:00| see...

CVE-2007-5779

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16572 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/gomopenurl.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-1689

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16610 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/nis2004get.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-0449

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16400 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/lgserver.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-3435

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16565 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/barcodeax49.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-1674

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16457 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/landeskaolnsrvr.rb 2025-02-06 03:13:38+00:00| seen|...

Kazaa Altnet Download Manager - ActiveX Control Buffer Overflow (Metasploit)

$Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Symantec Norton Internet Security 2004 - ActiveX Control Buffer Overflow (Metasploit)

$Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2007-6204

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16805 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmopenview5.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-4607

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16579 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/oracledcsubmittoexpress.rb 2025-02-06...