CVE-2007-6429

CVE-2007-6429 is a vulnerability in the X.Org Xserver (pre-1.4.1) involving integer overflows in the EVI and MIT-SHM extensions that could lead to arbitrary code execution. The initial description indicates memory allocation based on a 32-bit value in GetVisualInfo and shared-memory management de...

openSUSE 10 Security Update : novell-ipsec-tools (novell-ipsec-tools-4655)

This update fixes a security problem in novell-ipsec-tools : CVE-2007-1841: Fix a DoS in isakmpinforecv and also a non-security bug with a crash in GSSAPI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : xorg-x11-Xnest (xorg-x11-Xnest-4859)

This update fixes various Xserver security issues. File existence disclosure vulnerability CVE-2007-5958. XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6

Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject &LT8bpp shm pixmaps...

openSUSE 10 Security Update : libqt4 (libqt4-4790)

A bug in the QSslSocket class could under certain circumstances lead to incorrect SSL certificates beeing accepted as valid CVE-2007-5965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

CVE-2007-6690

The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors...

CVE-2007-6686

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

CVE-2007-6685

CVE-2007-6685 affects the Publish XP module of Menalto Gallery prior to 2.2.4. The description states an unspecified vulnerability that lets an attacker create albums and upload files via unknown vectors. Remediation per connected sources is to upgrade to Gallery 2.2.4 or newer (e.g., Gallery 2.2...

CVE-2007-6686

The CVE-2007-6686 issue affects Menalto Gallery prior to 2.2.4, where the URL rewrite module could be abused to include and execute arbitrary local files via vectors related to the admin controller. Impact is described as full confidentiality, integrity, and availability compromise. Remediation p...

CVE-2007-6687

The CVE-2007-6687 case affects Menalto Gallery (pre-2.2.4). The vulnerability is described as multiple XSS flaws that allow remote attackers to inject arbitrary script/HTML via crafted filenames in the Core or add-item modules, or via HTTP PROPPATCH in the WebDAV module. Impact is conveyed as the...

CVE-2007-6688

CVE-2007-6688 affects Menalto Gallery installations up to version 2.2.4 (Installation application) with an unspecified vulnerability tied to the web-accessibility protection of the storage folder. The Gentoo GLSA and related advisories note multiple vulnerabilities in Gallery (including CVE-2007-...

CVE-2007-6691

CVE-2007-6691 affects Menalto Gallery

CVE-2007-6692

CVE-2007-6692 corresponds to an open redirect vulnerability in Menalto Gallery up to version 2.2.3, allowing remote attackers to redirect users to arbitrary sites via URLs in the Core and print modules. Exploitation could enable phishing by directing victims to attacker-controlled pages. Gentoo G...

CVE-2007-6693

CVE-2007-6693 affects Menalto Gallery’s WebCam module prior to version 2.2.4, tied to a proxied request vulnerability. Connected sources (GLSA 200802-04) describe multiple Gallery vulnerabilities (CVE-2007-6685..6693) with remote code execution, XSS, and CSRF potential; advisory recommends upgrad...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

CVE-2007-6690

CVE-2007-6690 affects the Gallery Remote module in Menalto Gallery prior to 2.2.4. The vulnerability stems from permission checks not being performed for unspecified GR commands, with both impact and attack vectors described as unknown in the sources. Gentoo GLSA 200802-04 and related advisories ...

CVE-2007-6682

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

CVE-2007-6689

CVE-2007-6689 affects Menalto Gallery prior to version 2.2.4. The vulnerability arises because file upload handling does not properly validate malicious file extensions in the Core application or MIME module, enabling an attacker to execute arbitrary code on the server. Official advisories (Red H...