CVE-2008-2754

SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter...

CVE-2008-2754

CVE-2008-2754 describes an SQL injection in the toplists.php script of the eFiction platform for versions 3.0 and 3.4.3. The vulnerability occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL through the list parameter. The issue arises from improper input h...

CVE-2008-2754

creationtimestamp| type| source ---|---|--- 2008-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5785...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 3746)

This update of freetype2 fixes an integer signedness bug when handling TTF images. This bug can lead to a heap overflow that can be exploited to execute arbitrary code. CVE-2007-2754 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2004-2754

This CVE concerns a SQL injection in YaBB SE (v1.5.4, 1.5.3, and potentially older before 1.5.5) via the ID_MEMBER parameter to the recentTopics and welcome functions, allowing remote SQL commands. Affected software is YaBB SE; root cause is improper input handling in SSI.php. Impact per sources ...

openSUSE 10 Security Update : freetype2 (freetype2-3701)

This update of freetype2 fixes an integer signedness bug when handling TTF images. This bug can lead to a heap overflow that can be exploited to execute arbitrary code. CVE-2007-2754 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : freetype2 (freetype2-3744)

This update of freetype2 fixes an integer signedness bug when handling TTF images. This bug can lead to a heap overflow that can be exploited to execute arbitrary code. CVE-2007-2754 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or CVE-2007-1351...

RHEL 2.1 / 3 / 4 / 5 : freetype (RHSA-2007:0403)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

freetype security update

CentOS Errata and Security Advisory CESA-2007:0403 Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free,...

Moderate: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

[SECURITY] [DSA 1302-1] New freetype packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1302-1 [email protected] http://www.debian.org/security/ Steve Kemp June 10, 2007 - ------------------------------------------------------------------------ Package : freetype 2.2.1-5+etch1...

CVE-2007-2754

CVE-2007-2754 affects FreeType up to 2.3.4 and earlier, where a signedness error in truetype/ttgload.c can trigger a heap-based buffer overflow via a crafted TTF image with a negative n_points, enabling remote code execution per the description. Connected patches exist (e.g., Solaris X11 6.6.2 pa...

Solaris 5.9 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (x86) : 120186-19

StarOffice 8 Solarisx86: Update 14. Date this patch was last updated by Sun : Sep/10/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (sparc) : 120189-19

StarSuite 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2006-2754

OpenLDAP slurpd is affected by a stack-based buffer overflow in st.c when processing overly long hostnames, allowing arbitrary code execution. The vulnerability is in OpenLDAP versions prior to 2.3.22. Documents from Gentoo/SUSE advisories confirm the fixed version as 2.3.22 or newer. Remediation...

CVE-2005-2754

CVE-2005-2754 refers to an integer overflow in Apple QuickTime before 7.0.3 that can enable remote code execution when a crafted MOV file with “Improper movie attributes” is loaded. The issue is documented across multiple sources as affecting QuickTime on Mac OS X and Windows, with the overflow p...