CVE-2007-5753

Technical details about CVE-2007-5753 are not provided in the supplied documents. No concrete affected product versions, vulnerable component, or exploit information is available here. Monitor for updates from official advisories.

CVE-2007-2264

The CVE-2007-2264 issue is a heap overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing RA/RAM headers with an overly large size field. Affected products include RealPlayer 8, 10, 10.1 (and possibly 10.5), RealOne Player 1 and 2, and RealPlayer Enterprise. The underlying cause i...

CVE-2007-4599

Mode C: CVE-2007-4599 affects RealNetworks RealPlayer 10 (and possibly 10.5) and RealOne Player 1/2 on Windows. Root cause is a stack-based buffer overflow during parsing of crafted .pls playlists, enabling remote code execution. Exploitation requires a user to process the malicious playlist (per...

CVE-2007-5751

Liferea is affected by CVE-2007-5751 due to weak file permissions (0644) on the feedlist.opml backup, allowing local credential exposure. Affected scope is Liferea prior to 1.4.6. The vulnerability is listed with CVSS v2 base score 2.1 (low), local access required, and no access vectors beyond lo...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

CVE-2007-2263

CVE-2007-2263 describes a heap-based buffer overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing SWF files with malformed record headers, allowing remote code execution. The underlying flaw is in how RealPlayer’s SWF parsing handles header records, enabling an attacker to craft...

CVE-2007-5752

CVE-2007-5752 affects the PHP-AGTC Membership System (AGTC-Membership) 1.1a. The vulnerability is in adduser.php, which does not require authentication, allowing remote attackers to create accounts via a modified form, demonstrated by an account with admin (userlevel 4) privileges. Documented imp...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

CVE-2007-5740 affects Perdition, a IMAP proxy component; the vulnerability is a format string error in Perdition’s IMAP output handling (IMAPD) that could allow an unauthenticated remote attacker to execute arbitrary code. Impact: remote code execution on the Perdition server via a specially craf...

Important: cups security and bug fix update

1.2.4-11.14.el51.1 - Applied patch to fix CVE-2007-4351 STR 2561, bug 353981. 1.2.4-11.14 - Applied patch to fix cupsd crash when failing to open a file: URI STR 2351, bug 250415. 1.2.4-11.13 - Moved LSPP security attributes check before job creation bug 231522. 1.2.4-11.12 - Moved LSPP access...

Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061; CVE-2007-3896)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Windows Internet Explorer 7. The vulnerability occurs when Windows does not correctly handle specially crafted URLs or URIs that are passed to it. There are a...

Unfixed XSS vulnerability at www.slonic.net

Security researcher kaksii, has submitted on 31/10/2007 a cross-site-scripting XSS vulnerability affecting www.slonic.net, which at the time of submission ranked 6573358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currentl...

Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability

====================================================================== Secunia Research 31/10/2007 - CUPS IPP Tags Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow

====================================================================== Secunia Research 31/10/2007 - McAfee E-Business Server Auth Packet Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

Path traversal

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...

CVE-2007-5735

CVE-2007-5735 affects eFileMan 7.1.0.87-88. The vulnerability arises from storing sensitive information under the web root with insufficient access control, allowing remote attackers to obtain unspecified user information via a direct request to cgi-bin/efileman/efileman_config.pm. Impact is part...

CVE-2007-5731

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...

CVE-2007-5739

CVE-2007-5739 is a directory traversal vulnerability in the FlashUpload component’s file download.jsp (Korean GHBoard). The vulnerability allows remote attackers to read arbitrary server files by supplying a ".." sequence in the name parameter of the request. Affected software is the Korean GHBoa...