Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5587. Reason: This candidate is a duplicate of CVE-2007-5587. Notes: All CVE users should reference CVE-2007-5587 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5587

The CVE-2007-5587 entry describes a local privilege-escalation vulnerability in Macrovision SafeDisc’s secdrv.sys driver. The root cause is a buffer overflow in secdrv.sys before 4.3.86.0, triggered by a crafted argument to a METHOD_NEITHER IOCTL, affecting Windows XP SP2, XP x64, Server 2003 SP1...

CVE-2007-5586

...

CVE-2007-5586

CVE-2007-5587 describes a local elevation of privilege in the Macrovision SafeDisc driver (secdrv.sys). The vulnerability exists in how the driver handles configuration parameters and is exploitable via a crafted argument to a METHOD_NEITHER IOCTL, allowing a local attacker to execute arbitrary c...

DEBIAN-CVE-2007-5585

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...

CVE-2007-5585

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...

CVE-2007-5585

CVE-2007-5585 affects xscreensaver 5.03 and earlier. Root cause: a crash when /usr/bin/xscreensaver-gl-helper is missing while running without xscreensaver-gl-extras, enabling a physically proximate user to access a previously locked session. The SUSE entry and Fedora/OpenVAS notes confirm update...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

[SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1391-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2007 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Related products...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

Unfixed XSS vulnerability at www.opelmantaclubitalia.francob.org

Security researcher Langy, has submitted on 19/10/2007 a cross-site-scripting XSS vulnerability affecting www.opelmantaclubitalia.francob.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. ...

Mozilla products vulnerable to memory corruption in the JavaScript engine

Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

openSUSE 10 Security Update : festival (festival-4377)

The festival daemon runs as root. The default config doesn't have a password set. A local attacker could therefore connect to the daemon to have commands executed as root CVE-2007-4074. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

Unfixed XSS vulnerability at www.cicloturismopiceno.it

Security researcher Langy, has submitted on 19/10/2007 a cross-site-scripting XSS vulnerability affecting www.cicloturismopiceno.it, which at the time of submission ranked 8635144 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It i...