Important: Red Hat Security Advisory: libwpd security update

Updated libwpd packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

CVE-2012-2149

CVE-2012-2149 affects the libwpd library (used by OpenOffice.org prior to 3.4). The vulnerability stems from a memory corruption risk in WPXContentListener::_closeTableRow (reported as a negative array index or integer overflow), allowing remote code execution via crafted WordPerfect .WPD documen...

Debian DSA-2149-1 : dbus - denial of service

Remi Denis-Courmont discovered that dbus, a message bus application, is not properly limiting the nesting level when examining messages with extensive nested variants. This allows an attacker to crash the dbus system daemon due to a call stack overflow via crafted messages. %NASLMINLEVEL 70300 C...

CVE-2010-2149

The CVE-2010-2149 issue affects Fujitsu e-Pares V01 L01, L03, L10, L20, L30. A session fixation vulnerability could allow a remote attacker to impersonate a logged-in user and perform arbitrary operations, potentially leading to information disclosure or alteration. The root cause and exact explo...

CVE-2009-2149

The CVE-2009-2149 entry describes multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS. Attackers can inject arbitrary web script or HTML via parameters in specific pages: (1) courseid on enrolments/step1.php and (2) search or (3) siteid on files/shared_list.php. The affected...

CVE-2009-2149

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8937...

Mandriva Linux Security Advisory : wordnet (MDVSA-2008:182-1)

Rob Holland found several programming errors in WordNet which could lead to the execution or arbitrary code when used with untrusted input CVE-2008-2149, CVE-2008-3908. Update : The previous patch had a typo that caused incorrect behaviour in WordNet. This update uses an update patch that correct...

Mandriva Update for wordnet MDVSA-2008:182 (wordnet)

Check for the Version of wordnet OpenVAS Vulnerability Test Mandriva Update for wordnet MDVSA-2008:182 wordnet Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for wordnet MDVSA-2008:182-1 (wordnet)

Check for the Version of wordnet OpenVAS Vulnerability Test Mandriva Update for wordnet MDVSA-2008:182-1 wordnet Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for wordnet MDVSA-2008:182 (wordnet)

Check for the Version of wordnet OpenVAS Vulnerability Test Mandriva Update for wordnet MDVSA-2008:182 wordnet Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Core 10 FEDORA-2009-2149 (rubygem-actionpack)

The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-2149. OpenVAS Vulnerability Test $Id: fcore20092149.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2149 rubygem-actionpack Authors: Thomas Reinke Copyrigh...

Fedora Core 10 FEDORA-2009-2149 (rubygem-actionpack)

The remote host is missing an update to rubygem-actionpack announced via advisory FEDORA-2009-2149. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Gentoo Security Advisory GLSA 200810-01 (wordnet)

The remote host is missing updates announced in advisory GLSA 200810-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200810-01 (wordnet)

The remote host is missing updates announced in advisory GLSA 200810-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1634-2 (wordnet)

The remote host is missing an update to wordnet announced via advisory DSA 1634-2. OpenVAS Vulnerability Test $Id: deb16342.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1634-2 wordnet Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1634-2] New wordnet packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1634-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 20, 2008 http://www.debian.org/security/faq -...

Debian DSA-1634-1 : wordnet - stack and heap overflows

Rob Holland discovered several programming errors in WordNet, an electronic lexical database of the English language. These flaws could allow arbitrary code execution when used with untrusted input, for example when WordNet is in use as a back end for a web application. %NASLMINLEVEL 70300 C...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...