Important: Red Hat Security Advisory: autofs security update

Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...

CVE-2007-6352

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...

CVE-2007-6430

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations "realtime" and host-based authentication, does not check the IP address when the username is correct and there is no...

CVE-2007-6351

CVE-2007-6351 affects libexif up to version 0.6.16 and earlier via crafted Exif tags, causing an infinite recursion that can crash the application; CVE-2007-6352 is an accompanying integer-overflow issue in the same Exif parsing path that could crash or, in some contexts, allow code execution. Th...

CVE-2007-6430

CVE-2007-6430 affects Asterisk Open Source 1.2.x (before 1.2.26), 1.4.x (before 1.4.16), and Business Edition B.x.x (before B.2.3.6) and C.x.x (before C.1.0-beta8). The issue is that when using realtime (database-based registrations) and host-based authentication, the system does not check the IP...

CVE-2007-6352

CVE-2007-6352 relates to an integer overflow in libexif (versions up to and including 0.6.16) that can be triggered by parsing crafted Exif tags in images, potentially allowing an attacker to execute arbitrary code. The root cause is an overflow in the Exif thumbnail/image tag handling (exif_data...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6335. Reason: This candidate is a duplicate of CVE-2007-6335. Notes: All CVE users should reference CVE-2007-6335 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5759

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6335. Reason: This candidate is a duplicate of CVE-2007-6335. Notes: All CVE users should reference CVE-2007-6335 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6243

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 is affected by CVE-2007-6243 due to insufficient restriction of cross-domain policy files, enabling remote cross-domain and cross-site scripting (XSS) attacks. In the connected Red Hat advisories, this issue is list...

CVE-2007-5759

...

CVE-2007-6242

Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."...

CVE-2007-5759

CVE-2007-5759 is rejected/not used; reference CVE-2007-6335 instead.

CVE-2007-6336

CVE-2007-6336 is a ClamAV vulnerability (pre-0.92) caused by an off-by-one error when decompressing MS-ZIP CAB files. Remote attackers could execute arbitrary code by supplying a crafted CAB file. The issue is addressed by upgrading to ClamAV 0.92 or newer (per connected advisories noting fixes f...

CVE-2007-6246

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges...

CVE-2007-6335

CVE-2007-6335 is a ClamAV buffer-overflow issue exploited via specially crafted MEW-packed PE files. In FirePass deployments the vulnerability affected the ClamAV scanner daemon when scanning uploaded files; an authenticated FirePass user could trigger a heap/daemon crash or arbitrary code execut...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2007-6244

Adobe Flash Player (Flash-plugin) vulnerable to cross-site scripting via asfunction: and navigateToURL in the ActiveX/Plug-in context. Affected: Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0. Root cause: input validation issues when processing SWF parameters and asfunction: usage, per RH...

CVE-2007-6246

Adobe Flash Player 7.x/8.x/9.x on Linux is affected by CVE-2007-6246, where insecure memory permissions could allow local users to gain privileges. The vulnerability is part of a family of issues reported for Flash Player (alongside CVE-2007-6242, 6243, 6244, 6245, 6246, 4324, 4768) and is cited ...