CVE-2007-5275

CVE-2007-5275 is an Adobe Flash Player plug-in issue affecting Flash 9 where a Flash movie can remotely induce the victim to establish TCP sessions to arbitrary hosts due to DNS rebinding-like behavior and insufficient hostname-IP pinning after processing cross-domain policy (allow-access-from). ...

Code injection

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...

CVE-2007-5267

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...

CVE-2007-5262

CVE-2007-5262 affects Battlefront Dropteam 1.3.3 and earlier. The vulnerability is multiple format string weaknesses in the server handling of a \

CVE-2007-5266

CVE-2007-5266 : Off-by-one error in ICC profile chunk handling (png_set_iCCP in pngset.c) of libpng. Affects libpng versions before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1. Root cause allows remote attacker to crash the program via a crafted PNG (name field not NULL terminated). Mitigation: up...

CVE-2007-5263

The CVE-2007-5263 issue affects Battlefront Dropteam up to version 1.3.3, where multiple buffer overflows allow remote attackers to execute arbitrary code via a crafted 0x5c packet or by sending many 32-bit numbers in a 0x18 packet. A large 0x4b packet can also cause a denial of service (crash). ...

CVE-2007-5267

CVE-2007-5267 affects libpng: off-by-one error in ICC profile chunk handling in png_set_iCCP (pngset.c) prior to libpng 1.2.22 beta1. This can crash the process via a crafted PNG image (denial of service). The provided documents indicate a fix in 1.2.22 beta1; other details on exploit status are ...

CVE-2007-5268

CVE-2007-5268 affects libpng up to versions that include pngrtran.c with use of logical instead of bitwise operations and incorrect comparisons, which can cause a denial of service (crash) via a crafted PNG. The connected Nessus patches show Solaris 10 (SunOS 5.10) libpng patches (137080-07/09 fo...

CVE-2007-5264

The CVE-2007-5264 issue affects Battlefront Dropteam 1.3.3 and earlier. The vulnerability is that the game client sends the user’s online account name and password to the game server, allowing malicious servers to steal credentials (partial confidentiality impact). The NVD entry cites a base scor...

CVE-2007-5269

CVE-2007-5269 affects libpng in 1.0.x before 1.0.29 and 1.2.x before 1.2.21. An attacker can cause a crash (DoS) by crafting PNG chunks that trigger out-of-bounds reads via the affected chunk handlers: pCAL, sCAL, tEXt, iTXt, and ztXT. Public references in connected docs confirm a libpng patch wa...

CVE-2007-4851

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5137. Reason: This candidate is a duplicate of CVE-2007-5137. Notes: All CVE users should reference CVE-2007-5137 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5137. Reason: This candidate is a duplicate of CVE-2007-5137. Notes: All CVE users should reference CVE-2007-5137 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-4851

CVE-2007-4851 is a duplicate of CVE-2007-5137; the connected advisories describe a buffer overflow in Tk’s GIF image handling (libtk-img) triggered by specially crafted GIF files, including interlaced GIFs, potentially allowing code execution. Patching involves updating Tk/libtk-img packages as n...

CVE-2007-4851

...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Two...

Moderate: Red Hat Security Advisory: opal security update

Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Open Phone Abstraction Library opal is implementation of various telephony and video communication...

Moderate: Red Hat Security Advisory: pwlib security update

Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...

Moderate: kdelibs security update

3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...

Unfixed XSS vulnerability at spencerscott.bcs.mlxchange.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting spencerscott.bcs.mlxchange.com, which at the time of submission ranked 3437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. ...

Unfixed XSS vulnerability at www.randallspears.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting www.randallspears.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...