openSUSE Security Update : freetype2 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

CVE-2010-2519

Heap-based buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file...

CVE-2010-2519

CVE-2010-2519 describes a heap-based buffer overflow in FreeType’s Mac_Read_POST_Resource (base/ftobjs.c) that can be triggered by a crafted POST fragment header in a font file, potentially crashing the application or allowing arbitrary code execution. The issue affects FreeType up to version bef...

CentOS 4 / 5 : freetype (CESA-2010:0578)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Debian Security Advisory DSA 2070-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2070-1. OpenVAS Vulnerability Test $Id: deb20701.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2070-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Microsoft DHTML编辑组件ActiveX控件远程代码执行漏洞（MS09-046）

BUGTRAQ ID: 36280 CVECAN ID: CVE-2009-2519 Microsoft Windows是微软发布的非常流行的操作系统。 Windows所捆绑的DHTML编辑组件ActiveX控件（triedit.dll）在格式化HTML标记时存在错误。攻击者可以通过创建特制网页来利用这个漏洞，如果用户查看特制的网页，该漏洞可能允许远程执行指令。成功利用这些漏洞的攻击者可以获得与本地用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

CVE-2009-2519

CVE-2009-2519 describes a remote code execution vulnerability in the DHTML Editing Component ActiveX Control (triedit.dll) bundled with Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The flaw arises when formatting HTML markup, allowing a crafted web page viewed in Internet Explorer to trigge...

Microsoft DHTML Editing Component ActiveX Control Code Execution (MS09-046; CVE-2009-2519)

The DHTML Editing Component ActiveX control provides an HTML editor that can be used to support dynamic Web site HTML editing in software. A remote code execution vulnerability has been reported in the DHTML Editing Component ActiveX Control. The vulnerability is due to a memory corruption error ...

Mandriva Update for php-pear MDKSA-2007:110 (php-pear)

Check for the Version of php-pear OpenVAS Vulnerability Test Mandriva Update for php-pear MDKSA-2007:110 php-pear Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2008-2519

Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. dot dot sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup...

CVE-2008-2519

CVE-2008-2519 is a directory traversal vulnerability in Core FTP client 2.1 Build 1565. An attacker-controlled LIST response with .. sequences can cause the FTP server to create or overwrite arbitrary files on the affected client, potentially enabling code execution by writing to the Startup fold...

CVE-2007-2519

Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the 1 install-as attribute in the file element in package.xml 1.0 or the 2 as attribute in the install element in package.xm...

CVE-2007-2519

CVE-2007-2519 describes a directory traversal in the PEAR installer (versions 1.0–1.5.3) where an attacker can overwrite arbitrary files by supplying a .. sequence in PEAR’s package.xml attributes (install-as in file element for package.xml 1.0, or as in install element for package.xml 2.0). The ...

CVE-2007-2519

Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the 1 install-as attribute in the file element in package.xml 1.0 or the 2 as attribute in the install element in package.xm...

CVE-2006-2519

Directory traversal vulnerability in include/incext/spaw/spawcontrol.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. dot dot sequences in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition...

CVE-2006-2519

Directory traversal vulnerability in include/incext/spaw/spawcontrol.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. dot dot sequences in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition...

CVE-2006-2519

Summary of CVE-2006-2519 (phpwcms/spaw_root RFI) Affected product: phpwcms 1.2.5-DEV (SPA W Editor PHP Edition note indicates the underlying issue may be in SPAW Editor PHP Edition). Vulnerability: Directory traversal allows remote attackers to include arbitrary local files via .. sequences in th...

CVE-2004-2519

The CVE-2004-2519 entry concerns Gattaca Server 2003 version 1.1.10.0. The vulnerability is a denial-of-service condition caused by how the LANGUAGE parameter handles directory specifiers in index.tmpl and web.tmpl. Examples include using: /, , ., .., and lang//en, which can lead to CPU consumpti...

CVE-2005-2519

CVE-2005-2519 affects Mac OS X 10.3.9’s Directory Services component (slpd). The vulnerability arises from insecure temporary files created with root privileges, enabling local privilege escalation. The available connected documents confirm the affected product and root cause but do not provide e...