CVE-2007-4343

The vulnerability CVE-2007-4343 affects IrfanView 3.99 and 4.00 and is a stack-based buffer overflow in the handling of palette (*.pal) files. This boundary error can be triggered by a crafted palette file, enabling user-assisted remote code execution. Impact is described as arbitrary code execut...

CVE-2007-5479

CVE-2007-5479 is a cross-site scripting (XSS) vulnerability disclosed for Xcomputer, affecting the Search.asp functionality. The issue allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. The provided documents confirm the vulnerability and its presence in the Se...

CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...

CVE-2007-5483

IBM WebSphere Application Server 6.0.x prior to Fix Pack 23 is affected by an unspecified vulnerability in the Administrative Scripting Tools (wsadmin/ANT). The NASL entry explicitly identifies this version range and tool, but provides no technical details on root cause, impact, or exploit vector...

CVE-2007-5477

CVE-2007-5477 is a cross-site scripting (XSS) vulnerability in the auth.w component of the djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin. The issue allows remote attackers to inject arbitrary web script or HTML through the redir parameter. This is a user-facing web context vulnerable to...

OpenSSL Vulnerability CVE-2007-4995

...

CVE-2007-5468

Cisco CallManager 5.1.1.3000-5 is vulnerable because it does not verify the Digest authentication header URI against the SIP Request URI. This allows remote attackers to use sniffed Digest credentials to place arbitrary calls or spoof caller ID (toll fraud and authentication forward attack). The ...

Unfixed XSS vulnerability at www.onurhosting.net

Security researcher kusomiso.com, has submitted on 16/10/2007 a cross-site-scripting XSS vulnerability affecting www.onurhosting.net, which at the time of submission ranked 1365338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/10/2007. It ...

CVE-2007-5469

CVE-2007-5469 concerns OpenSER 1.2.2, where the system does not verify the Digest authentication header URI against the Request URI in SIP messages. This mismatch allows remote attackers to use sniffed Digest credentials to initiate calls to arbitrary telephone numbers or spoof caller ID (describ...

Fedora Core 6 : openssl-0.9.8b-15.fc6 (2007-725)

Fri Oct 12 2007 Tomas Mraz 0.9.8b-15 - fix CVE-2007-5135 - off-by-one in SSLgetsharedciphers 309801 - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow 321191 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2007-5470

Microsoft Expression Media stores the catalog password in cleartext inside the catalog IVC file, enabling local users to read sensitive credentials and access the catalog. The weakness stems from a design flaw in the catalog password-protection feature; exploitation details are not provided in th...

Security | Oracle Critical Patch Update - October 2007

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, but each advisory describes only the security fixes added...

Balsa: Buffer overflow

Background Balsa is a highly configurable email client for GNOME. Description Evil Ninja Squirrel discovered a stack-based buffer overflow in the irfetchseq function when receiving a long response to a FETCH command CVE-2007-5007. Impact A remote attacker could entice a user to connect to a...

Unfixed XSS vulnerability at www.sms-praha.cz

Security researcher kusomiso.com, has submitted on 16/10/2007 a cross-site-scripting XSS vulnerability affecting www.sms-praha.cz, which at the time of submission ranked 1486214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Fedora Core 6 : openssh-4.3p2-25.fc6 (2007-715)

Tue Oct 2 2007 Tomas Mraz - 4.3p2-25 - do not fall back on trusted X11 cookies CVE-2007-4752 280471 - Fri Jul 13 2007 Tomas Mraz - 4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 - Thu Jun 21 2007 Tomas Mraz - 4.3p2-23 - document where the nss certificate and token dbs are...

CVE-2007-5471

CVE-2007-5471 affects libgssapi before 0.6-13.7 used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP1. The library terminates on an initialization error, allowing remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. The issue probably affects othe...

CVE-2007-5465

CVE-2007-5465 affects Doop CMS up to version 1.3.7 and earlier. The vulnerability is a directory traversal flaw that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter sent to an unspecified component. The available connected records reit...

CVE-2007-5467

CVE-2007-5467 affects eXtremail 2.1.1 and earlier, where an integer overflow in handling a long POP3 USER command with "%%s" sequences can lead to a deny/DoS and possibly arbitrary code execution. The underlying issue is tied to how memmove processes the expanded format string, reportedly related...

CVE-2007-5460

Microsoft ActiveSync 4.1 (used with Windows Mobile 5.0) contains a cryptographic weakness: PIN/Password is sent over USB using XOR obfuscation with a fixed key, enabling potential recovery of credentials if the host network is sniffed or the USB docking process is spoofed. Affected component/proc...

CVE-2007-5464

CVE-2007-5464 describes a stack-based buffer overflow in Live for Speed 0.5X10 and earlier. The vulnerability allows remote authenticated users to crash the client and potentially execute arbitrary code via a long skin name. Affected component is the client’s handling of skin names; root cause is...