LibTIFF TIFF Image Buffer Underflow Vulnerability

LibTIFF is prone to buffer underflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS vulnerability

PMASA-2009-5 Announcement-ID: PMASA-2009-5 Date: 2009-06-30 Summary XSS vulnerability Description It was possible to conduct an XSS attack via a crafted SQL bookmark. Severity We consider this vulnerability to be serious. Affected Versions For 2.11.x: versions are not affected. For 3.x: All 3.x...

Mandrake Security Advisory MDVSA-2009:134 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:134. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:111 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:111. OpenVAS Vulnerability Test $Id: mdksa2009111.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:111 firefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:111 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:111. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Xen hypervisor_callback()函数本地拒绝服务漏洞

BUGTRAQ ID: 34957 Xen是可用于Linux内核的一种虚拟化技术，允许同时运行多个操作系统。 Xen的arch/i386/kernel/entry-xen.S文件中的hypervisorcallback函数对中断代码的代码选择器缺少检查，32位x86 guest系统上的本地用户可以导致内核崩溃。 XenSource Xen 3.x 厂商补丁： XenSource --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0153

CVE-2009-0153 affects ICU libraries (ICU 4.0, 3.6 and other 3.x versions) as used in macOS 10.5.x before 10.5.7, iPhone OS 1.0–2.2.1, iPod touch 1.1–2.2.1, and various Linux distributions. The issue arises from improper handling of invalid byte sequences during Unicode conversion, which could all...

CVE-2009-1188

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service application crash...

CVE-2009-1188

CVE-2009-1188 involves an integer overflow in the JBIG2 decoding path of the SplashBitmap feature. Affected software: Xpdf 3.x (before 3.02pl4) and Poppler (before 0.10.6), used by GPdf and kdegraphics KPDF. Root cause: integer overflow in JBIG2 decoding that can be triggered by a crafted PDF, le...

CVE-2009-1188

Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service application crash...

Design/Logic Flaw

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors...

PT-2009-3303

Name of the Vulnerable Software and Affected Versions PlonePAS product versions 3.x before 3.9 PlonePAS product versions 3.2.x before 3.2.2 Description The issue concerns improper handling of the login form, allowing remote authenticated users to acquire the identity of an arbitrary user...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:084)

Security vulnerabilities have been discovered in previous versions, and corrected in the latest Mozilla Firefox 3.x, version 3.0.8 CVE-2009-1044, CVE-2009-1169. This update provides the latest Mozilla Firefox 3.x to correct these issues. Additionally, some packages requiring it have also been...

Code injection

Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files...

Mandriva Update for tetex MDKSA-2007:109 (tetex)

Check for the Version of tetex OpenVAS Vulnerability Test Mandriva Update for tetex MDKSA-2007:109 tetex Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for firefox MDVSA-2008:245 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2008:245 firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Squid Proxy Cache ICAP Adaptation Denial of Service Vulnerability

According to its version number, the remote version of Squid is prone to a to a remote denial-of-service vulnerability because the proxy server fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Successfully exploiting this issue allows remote...

CVE-2009-1150

Multiple cross-site scripting XSS vulnerabilities in the export page displayexport.lib.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pmadbfilenametemplate cookie...

phpMyAdmin Config File Code Injection

This module exploits a vulnerability in phpMyAdmin's setup feature which allows an attacker to inject arbitrary PHP code into a configuration file. The original advisory says the vulnerability is present in phpMyAdmin versions 2.11.x use exploit/unix/webapp/phpmyadmin/config msf undefinedconfig...

Mandrake Security Advisory MDVSA-2009:075 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:075. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...