CVE-2007-6186

Technical details about CVE-2007-6186 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2007-6183

CVE-2007-6183: A format-string vulnerability in Ruby-GNOME 2 (Ruby-GNOME2) 0.16.0 and SVN builds before 20071127 affects the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c. The message parameter’s format specifiers can allow context-dependent attackers to execute arbitrary code. The is...

QuickTime RTSP Content-Type header buffer overflow

Added: 11/30/2007 CVE: CVE-2007-6166 BID: 26549 OSVDB: 40876 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow vulnerability in QuickTime allows command execution when a user opens an RTSP stream containing a specially crafted Content-Type header...

Important: pcre security update

3.9-10.4 - Fix CVE-2007-1660, bug 381991...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4758)

This update brings Mozilla Firefox to security update version 2.0.0.10 Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have t...

openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)

Malicious users could specify their session-ID in the URL and could gain access to an authenticated session that way CVE-2007-5380. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2007-6180

CVE-2007-6180: Solaris rpcmod race condition in the Remote Procedure Call kernel module affects SunOS/Solaris 8–10. The vulnerability allows local users to trigger a denial of service via a NULL dereference/panic, with the exact vectors not detailed in the provided sources. Publicly documented fi...

openSUSE 10 Security Update : cifs-mount (cifs-mount-4740)

This update fixes two buffer overflows in nmbd CVE-2007-4572, CVE-2007-5398. Remote attackers could potentially exploit them to execute arbitrary code. The updated packages additionally contain fixes for numerous other defects. Please refer to the package changelog for details. %NASLMINLEVEL 7030...

RHEL 4 : pcre (RHSA-2007:1068)

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Unfixed XSS vulnerability at software.myetoolsonline.com

Security researcher Uber0n, has submitted on 30/11/2007 a cross-site-scripting XSS vulnerability affecting software.myetoolsonline.com, which at the time of submission ranked 2664183 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. I...

CVE-2007-4346

CVE-2007-4346 affects Symantec Backup Exec for Windows Servers BEWS (Job Engine, bengine.exe) on 11d builds 11.0.7170 and 11.0.6.6235. A NULL pointer dereference (and related DoS via integer overflows) can be triggered by specially crafted packets sent to port 5633/TCP, causing the listening serv...

CVE-2007-4347

Symantec Backup Exec for Windows Servers BEWS 11d (11.0.7170 and 11.0.6.6235) is affected by two integer overflow DoS issues and a NULL pointer dereference in the Job Engine (bengine.exe). A crafted 5633/tcp packet can trigger an infinite loop, causing high CPU/memory usage or service crash. Patc...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1409-3 [email protected] http://www.debian.org/security/ Steve Kemp November 29, 2007 http://www.debian.org/security/faq -...

Immunity Canvas: QT73_RTSP

Name| qt73rtsp ---|--- CVE| CVE-2007-6166 Exploit Pack| CANVAS Description| QuickTime 7.3 RTSP Buffer Overflow Notes| CVE Name: CVE-2007-6166 VENDOR: Apple Repeatability: Infinite client side - no crash CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6166 Date public: 11/23/20...

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6164

Eurologon CMS is affected by multiple SQL injection vulnerabilities: the id parameter in reviews.php, links.php, and articles.php can be exploited to execute arbitrary SQL remotely. Root cause is improper input handling in these PHP scripts. The provided documents do not specify affected version ...