120 matches found
CVE-2010-2065
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow...
CVE-2010-2065
CVE-2010-2065 : Affected software: libTIFF. A vulnerability in the TIFFroundup macro causes an integer overflow in LibTIFF before 3.9.3 when processing crafted TIFF files. Impact stated: denial of service (application crash) and possible arbitrary code execution via buffer overflow. Affected vers...
[USN-954-1] tiff vulnerabilities
=========================================================== Ubuntu Security Notice USN-954-1 June 21, 2010 tiff vulnerabilities CVE-2010-1411, CVE-2010-2065, CVE-2010-2067 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6....
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : tiff vulnerabilities (USN-954-1)
Kevin Finisterre discovered that the TIFF library did not correctly handle certain image structures. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a...
USN-954-1: tiff vulnerabilities
Kevin Finisterre discovered that the TIFF library did not correctly handle certain image structures. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a...
CVE-2010-2065
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow...
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)
This update of acroread fixes : - Cross-domain request vulnerability. CVE-2010-0186 : CVSS v2 Base Score: 5.8 - An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0188 : CVSS v2 Base Score: 6.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
Mandrake Security Advisory MDVSA-2009:134 (firefox)
The remote host is missing an update to firefox announced via advisory MDVSA-2009:134. OpenVAS Vulnerability Test $Id: mdksa2009134.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:134 firefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Mozilla Firefox Multiple Vulnerability Jun-09 (Linux)
The host is installed with Firefox Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultvulnjun09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Vulnerabilities Jun-09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbon...
CVE-2009-2065
CVE-2009-2065 (Mozilla Firefox) : Firefox 3.0.10 (and possibly other versions) is vulnerable to a context-mixing flaw where http content can be loaded in an https page when the top-level frame is https. An MITM attacker could modify an http page to include an https iframe that loads a script from...
CVE-2008-2065
CVE-2008-2065 describes an SQL injection in the jokes.php component of the YourFreeWorld Jokes Site Script. The vulnerability allows remote attackers to execute arbitrary SQL commands via the catagorie parameter, potentially compromising data confidentiality, integrity and availability. Affected ...
CVE-2008-2065
creationtimestamp| type| source ---|---|--- 2008-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5508...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 2065)
Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include...
CVE-2007-2065
CVE-2007-2065 is a PHP remote file inclusion vulnerability affecting Robert Ladstaetter ActionPoll 1.1.1, in which an attacker can execute arbitrary PHP code by supplying a URL in the CONFIG_DATAREADERWRITER parameter to db/PollDB.php. This describes a separate vector from CVE-2001-1297. The prov...
CVE-2006-2065
PHPSurveyor
CVE-2002-2065
WebCalendar 0.9.34 and earlier is affected by an insecure include-file access vulnerability. When the product is built with “browsing in includes directory” enabled, remote attackers can read arbitrary .inc files from the web root. Root cause: insecure include-path handling allows reading local i...
CVE-2005-2065
Affected product: ASP Nuke 0.80 (language_select.asp). Vulnerability: HTTP response splitting via CRLF ("%0d%0a") in the LangCode parameter. Impact (as stated): remote attackers can spoof web content and poison web caches. Root cause: unsafely untrusted LangCode parameter allowing CRLF sequences....
CVE-2004-2065
CVE-2004-2065 concerns DansGuardian 2.8 and earlier, where remote attackers can bypass the extension filtering rule by using a hex-encoded extension or a filename containing a dot. The available connected documents confirm the affected product and the bypass method, describing the underlying caus...
