SuSE9 Security Update : freetype2 (YOU Patch Number 12656)

When loading specially crafted font files applications linked against freetype2 could crash or potentially even execute arbitrary code CVE-2010-3311, CVE-2010-3053, CVE-2010-3054. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

RHEL 3 : freetype (RHSA-2010:0736)

Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 3 : freetype (CESA-2010:0736)

Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

freetype security update

CentOS Errata and Security Advisory CESA-2010:0736 Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

freetype security update

2.1.4-18.el3 - Modify freetype-2.1.4-CVE-2010-3054.patch - Resolves: 638139 2.1.4-17.el3 - Add freetype-2.1.4-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.1.4-CVE-2010-3311.patch Don't seek behind end of stream. - Add freetype-2.1.4-CVE-2010-3054.patch...

freetype security update

2.2.1-28 - Modify freetype-2.2.1-CVE-2010-3054.patch - Resolves: 638142 2.2.1-27 - Add freetype-2.2.1-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.2.1-CVE-2010-3311.patch Don't seek behind end of stream. - Add freetype-2.2.1-CVE-2010-3054.patch Protect...

FreeType Unspecified Vulnerability - Windows

FreeType is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for freetype2 MDVSA-2010:156 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:156 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2010-3054

Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character aka seac calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c...

CVE-2010-3054

CVE-2010-3054 affects FreeType 2.3.9 and other versions before 2.4.2. It allows remote attackers to cause a denial of service via nested Standard Encoding Accented Character (seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c. The issue is fixed in FreeType 2.4.2 and later; u...

CVE-2009-3054

SQL injection vulnerability in the Artetics.com Art Portal comartportal component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the portalid parameter to index.php...

CVE-2009-3054

CVE-2009-3054 affects the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla!, with a SQL injection vulnerability in index.php via the portalid parameter. The underlying cause is an improperly sanitized portalid input that enables arbitrary SQL commands when processed by the applica...

CVE-2009-3054

creationtimestamp| type| source ---|---|--- 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9563...

CVE-2008-3054

CVE-2008-3054 describes an SQL injection vulnerability in the Branchenbuch (Yellow Pages) extension mh_branchenbuch for TYPO3 , versions 0.8.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected prod...

CVE-2008-3054

SQL injection vulnerability in the Branchenbuch aka Yellow Pages o mhbranchenbuch extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3054

Cross-site scripting XSS vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3054

CVE-2007-3054 describes a Cross-site scripting (XSS) vulnerability in search.php of Codelib Linker 2.0.4 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the kword parameter. The available connected documents confirm the affected component and the vulne...

CVE-2007-3054

Cross-site scripting XSS vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-3054

VBZooM 1.11 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) sobjectID or (2) MAINID parameters to show.php, or (3) MainID parameter to subject.php. The issue is documented in CVE-2006-3054 with an NVD base score of 7.5 (H...

CVE-2005-3054

PHP fopen_wrappers.c vulnerability (CVE-2005-3054) affects PHP 4.4.0 and possibly other versions, where open_basedir with a trailing slash can fail to restrict access to directories whose names are substrings of the target path. This enables PHP scripts in one directory to access files in other d...