137 matches found
[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1621-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1615-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2008 http://www.debian.org/security/faq -...
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5411)
Mozilla Firefox was updated to version 2.0.0.15, fixing various bugs including following security bugs : CVE-2008-2798 CVE-2008-2799 MFSA-2008-21: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...
Debian: Security Advisory (DSA-1607-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-2802
Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."...
CVE-2008-2802
The CVE-2008-2802 entry affects Mozilla Firefox <= 2.0.0.14/2.0.0.15? and earlier Thunderbird 2.0.0.14 and SeaMonkey
openSUSE 10 Security Update : xine-lib (xine-lib-1599)
Missing length checks in the HTTP plugin could lead to a buffer overflow on the heap CVE-2006-2802. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xine-lib-1599. The text description of this...
CVE-2007-2802
CVE-2007-2802 is an XSS vulnerability in RM EasyMail Plus, affecting the cp/ps/Main/login/Login path where the d parameter can be exploited to inject arbitrary script/HTML. The description and multiple connected sources confirm the vulnerability exists in RM EasyMail Plus and is accessible via a ...
Mandrake Linux Security Advisory : ffmpeg (MDKSA-2006:173)
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in 1 dtsdec.c, 2 vorbis.c, 3 rm.c, 4sierravmd.c, 5 smacker.c, 6 tta.c, 7 4xm.c, 8 alac.c, 9 cook.c,...
[slackware-security] xine-lib
New xine-lib packages are available for Slackware 10.2 and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-4048 https://vulners.com/cve/CVE-2006-2802 Evidently there is also an...
FreeBSD : libxine -- buffer overflow vulnerability (107e2ee5-f941-11da-b1fa-020039488e34)
A Secunia Advisory reports : Federico L. Bossi Bonin has discovered a weakness in xine-lib, which can be exploited by malicious people to crash certain applications on a user's system. The weakness is cause due to a heap corruption within the 'xinepluginphttp.so' plugin when handling an overly...
CVE-2006-2802
CVE-2006-2802 : Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) of xine-lib 1.1.1 can be triggered by a long HTTP response, leading to a denial of service (application crash). Connected advisories confirm this issue across multiple distributions (e.g., Debian DSA-1105 noting a fix, with...
CVE-2006-2802
Buffer overflow in the HTTP Plugin xinepluginphttp.so for xine-lib 1.1.1 allows remote attackers to cause a denial of service application crash via a long reply from an HTTP server, as demonstrated using gxine 0.5.6...
CVE-2005-2802
CVE-2005-2802 is rejected and not used; it does not represent an active vulnerability entry.
