SuSE 10 Security Update : XMMS (ZYPP Patch Number 3075)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files. CVE-2007-0653 / CVE-2007-0654 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-3075

CVE-2007-3075: Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme (e.g., encoded backslash). The connected documents confirm the vulnerability description but do not spec...

CVE-2006-3075

CVE-2006-3075 involves multiple PHP remote file inclusion vulnerabilities in PictureDis Professional (versions up to 1.33 Build 234) and PictureDis Photoalbum (up to 4.82). The underlying issue is that the lang parameter used to select files within photoalbum/ (specifically thumstbl.php, wpfiles....

CVE-2005-3075

CVE-2005-3075 affects Zengaia before 0.2. It is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. The vulnerability is documented in multiple feeds (NVD, Red Hat advisory, CVE records). Impact is consistent with a high-severity ratin...