openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5411)

Mozilla Firefox was updated to version 2.0.0.15, fixing various bugs including following security bugs : CVE-2008-2798 CVE-2008-2799 MFSA-2008-21: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

CVE-2008-2799

CVE-2008-2799 pertains to multiple unpatched JavaScript engine flaws in Mozilla Firefox (pre-2.0.0.15), Thunderbird (pre-2.0.0.14 and earlier), and SeaMonkey (pre-1.1.10). The vulnerabilities allow a remote attacker to cause a crash and potentially execute arbitrary code via unknown vectors relat...

Mozilla Foundation Security Advisory 2008-21

Mozilla Foundation Security Advisory 2008-21 Title: Crashes with evidence of memory corruption rv:1.8.1.15 Impact: Critical Announced: July 1, 2008 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0 Firefox 2.0.0.15 SeaMonkey 1.1.10...

SuSE 10 Security Update : file (ZYPP Patch Number 3755)

This update fixes an integer overflow in function fileprintf of file. This bug can be used to execute arbitrary code. CVE-2007-2799 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Fedora 7 : file-4.21-1.fc7 (2007-0836)

Update to new upstream 4.21 should also fix CVE-2007-2799 file integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE 10 Security Update : file (file-3757)

This update fixes an integer overflow in function fileprintf of file. This bug can be used to execute arbitrary code. CVE-2007-2799 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update file-3757. T...

[SECURITY] [DSA 1343-2] New file packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1343-2 [email protected] http://www.debian.org/security/ Florian Weimer September 25th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1343-2] New file packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1343-2 [email protected] http://www.debian.org/security/ Florian Weimer September 25th, 2007 http://www.debian.org/security/faq -...

File多个拒绝服务漏洞

CVE ID:CVE-2007-2026 CVE-2007-2799 CNCVE ID:CNCVE-20072026 CNCVE-20072799 File是一款nix下的文件格式识别工具。 File处理恶意文件错误，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 CVE-2007-2026是对特定的规则表达式处理存在问题，可导致应用程序崩溃。 CVE-2007-2799是存在整数下溢问题，可导致任意代码执行。 目前没有详细漏洞细节提供。 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu...

Fedora Core 5 : file-4.21-1.fc5 (2007-541)

This update should provide latest upstream version 4.21 and should contain fix for CVE-2007-2799. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Core 6 : file-4.21-1.fc6 (2007-538)

This update should provide latest upstream version 4.21 and should contain fix for CVE-2007-2799. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CentOS 4 / 5 : file (CESA-2007:0391)

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

Moderate: Red Hat Security Advisory: file security update

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

Moderate: file security update

4.10-3.0.2 - resolves: 241026: CVE-2007-2799 file integer overflow - added dependency on zlib-devel...

CVE-2007-2799

The CVE-2007-2799 issue affects the file utility (4.20 on 32‑bit systems) used by products like The Sleuth Kit. The root cause is an integer overflow introduced by a patch for CVE-2007-1536, which could allow user‑assisted arbitrary code execution via a crafted large file. Public advisories confi...

CVE-2006-2799

Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...

CVE-2006-2799

CVE-2006-2799 describes a Cross-Site Scripting (XSS) vulnerability in toendaCMS 0.7.0, specifically in content_footer.php where the print_url parameter can be exploited to inject arbitrary web scripts or HTML. The vulnerability is exploitable remotely and is categorized with a CVSS v2 base score ...

Immunity Canvas: LINKSYS_APPLY_CGI

Name| linksysapplycgi ---|--- CVE| CVE-2005-2799 Exploit Pack| CANVAS Description| linksysapplycgi Notes| References: http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities CVE Name: CVE-2005-2799 VENDOR: Linksys Date public: Sep 13, 2005 CVE Url:...

CVE-2005-2799

CVE-2005-2799 is a buffer overflow in Linksys WRT54G/WRT54GS apply.cgi that enables remote code execution via a long HTTP POST. Affected firmware includes 3.01.03, 3.03.6 and other versions before 4.20.7. Public exploitation modules exist (e.g., Metasploit) for apply.cgi on WRT54G/WRT54GL/WRT54GS...

CVE-2005-2913

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2799. Reason: This candidate is a duplicate of CVE-2005-2799. Notes: All CVE users should reference CVE-2005-2799 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...