CVE-2007-6279

The vulnerability is in the Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, where multiple double-free flaws affect parsing .FLAC files. Specifically, malformed Seektable values or Seektable Data Offsets can allow user‑assisted remote attackers to execute arbitrary code. Practical impact i...

CVE-2007-6276

Summary: CVE-2007-6276 affects Apple Mac OS X 10.5 before 10.5.4. The vulnerability resides in the accept_connections function of vpnd (VPN daemon), which can be triggered remotely by sending a crafted load-balancing UDP packet to port 4112, causing a divide-by-zero error and a daemon crash (deni...

CVE-2007-6109

CVE-2007-6109 describes a stack-based buffer overflow in Emacs triggered by a large precision value in an integer format specifier to the format function, leading to denial of service (crash) and potentially other impacts. Concrete references in connected docs indicate the vulnerability affects E...

Unfixed XSS vulnerability at www.findsolar.com

Security researcher nightsshadow, has submitted on 12/07/2007 a cross-site-scripting XSS vulnerability affecting www.findsolar.com, which at the time of submission ranked 456919 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...

Unfixed XSS vulnerability at hackerdegree.com

Security researcher nightsshadow, has submitted on 12/07/2007 a cross-site-scripting XSS vulnerability affecting hackerdegree.com, which at the time of submission ranked 940699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...

NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2007-02 Cisco Security Agent Remote Buffer Overflow Vulnerability Release Date: 2007-12-06 CVE ID: CVE-2007-5580 http://www.nsfocus.com/english/homepage/research/0702.htm Affected systems & software =================== Cisco Security Agent for Windows 4.5.1.672 Cisco...

Unfixed Redirect vulnerability at www.freewebtemplates.com

Security researcher St@rExT, has submitted on 12/07/2007 a Redirect vulnerability affecting www.freewebtemplates.com, which at the time of submission ranked 10593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Ubuntu 6.10 / 7.04 / 7.10 : firefox regression (USN-546-2)

USN-546-1 fixed vulnerabilities in Firefox. The upstream update included a faulty patch which caused the drawImage method of the canvas element to fail. This update fixes the problem. We apologize for the inconvenience. It was discovered that Firefox incorrectly associated redirected sites as the...

openSUSE 10 Security Update : kernel (kernel-4749)

This kernel update fixes the following security problems : ++ CVE-2007-5500: A buggy condition in the ptrace attach logic can be used by local attackers to hang the machine. ++ CVE-2007-5501: The tcpsacktagwritequeue function in net/ipv4/tcpinput.c allows remote attackers to cause a denial of...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4769)

This update of OpenOfficeorg adds restrictions to SQL statements of Java-based databases to avoid the execution of native Jave code by creating procedures. CVE-2007-4575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

HP OpenView Network Node Manager Multiple CGI Remote Overflows

The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : tetex-bin, texlive-bin vulnerabilities (USN-554-1)

Bastien Roucaries discovered that dvips as included in tetex-bin and texlive-bin did not properly perform bounds checking. If a user or automated system were tricked into processing a specially crafted dvi file, dvips could be made to crash and execute code as the user invoking the program...

openSUSE 10 Security Update : e2fsprogs (e2fsprogs-4739)

This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE 10 Security Update : gnump3d (gnump3d-4774)

This update fixes a restriction bypass in gnump3d's plugins. CVE-2007-6130 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnump3d-4774. The text description of this plugin is C SUSE LLC...

Debian DSA-1420-1 : zabbix - programming error

Bas van Schaik discovered that the agentd process of Zabbix, a network monitor system, may run user-supplied commands as group id root, not zabbix, which may lead to a privilege escalation. zabbix is not included in the oldstable distribution sarge. %NASLMINLEVEL 70300 C Tenable Network Security,...

KLA10335 ACE vulnerability in SonicWall Global VPN client

Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Exploitation Public exploits...