93 matches found
Mandriva Linux Security Advisory : libpng (MDVSA-2012:033)
A vulnerability has been found and corrected in libpng : A heap-based buffer overflow flaw was found in the way libpng processed compressed chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or...
RHEL 5 / 6 : libpng (RHSA-2012:0407)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0407 advisory. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A heap-based...
libpng security update
2:1.2.48-1 - Update to libpng 1.2.48, for minor security issues CVE-2011-3045 Resolves: 801663...
Fedora 17 : libpng-1.5.9-1.fc17 (2012-3605)
Update to latest versions for minor security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2009-3045
Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate...
CVE-2009-3045
Opera before 10.00 trusts root X.509 certificates signed with MD2, enabling MITM with a crafted server certificate and spoofing of SSL servers. Affected component is the browser’s certificate handling; the root cause is acceptance of MD2-signed certificates, which undermines TLS trust. In practic...
CVE-2008-3045
Technical details about CVE-2008-3045 are not publicly available in the provided documents. Monitor for updates; no confirmed affected product versions, root cause, impact, or fixes are listed here.
openSUSE 10 Security Update : krb5 (krb5-3045)
A bug in the function krb5klogsyslog leads to a buffer overflow which could be exploited to execute arbitrary code CVE-2007-0957. A double-free bug in the GSS-API library could crash kadmind. It's potentially also exploitable to execute arbitrary code CVE-2007-1216. %NASLMINLEVEL 70300 C Tenable...
CVE-2007-3045
CVE-2007-3045 fingerprint: Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 (pre-20070213) and HP-UX (pre-20070314) can allow remote attackers to cause a denial of service by sending certain data to a port. Affected component is the Hitachi TP1/NET/OSI-TP-Extended stack; ...
CVE-2006-3045
Foing 0.7.0e and earlier contains a PHP remote file inclusion in manage_songs.php that allows an attacker to execute arbitrary PHP code via a URL provided to the foing_root_path parameter. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector and low complexity, no auth...
CVE-2005-3045
SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field...
CVE-2005-3045
CVE-2005-3045 affects My Little Forum 1.5 and 1.6 beta, where the vulnerability resides in the search.php component. The underlying issue is a SQL injection via the phrase field, allowing remote attackers to alter the database by injecting arbitrary SQL commands. Documents consistently describe t...