CVE-2009-3376

CVE-2009-3376 affects Mozilla Firefox (before 3.0.15 and 3.5.x before 3.5.4) and SeaMonkey (before 2.0). The root cause is improper handling of a right-to-left override (RLO, U+202E) Unicode character in a download filename, which can cause the displayed name to differ from the actual filename. T...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:1531 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source W...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

RHEL 4 / 5 : firefox (RHSA-2009:1530)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1530 advisory. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. nspr provides the...

RHEL 4 : seamonkey (RHSA-2009:1531)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1531 advisory. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the way SeaMonkey...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

FreeBSD Ports: libwmf

The remote host is missing an update to the system as announced in the referenced advisory. VID 48aab1d0-4252-11de-b67a-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 48aab1d0-4252-11de-b67a-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200608-17 (libwmf)

The remote host is missing updates announced in advisory GLSA 200608-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3376

CVE-2008-3376 concerns JamRoom prior to 3.4.0 with multiple unspecified vulnerabilities described as having unknown impact and attack vectors. The connected documents do not provide concrete technical details such as affected components, root cause, specific versions beyond “before 3.4.0,” or exp...

SuSE 10 Security Update : libwmf (ZYPP Patch Number 1833)

A heap overflow could be triggered by specially crafted WMF Windows Meta Files in the libwmf library. This problem could be exploited to execute code, by a remote attacker providing a file with embedded WMF data to an application understanding this like OpenOfficeorg, abiword, gimp. This issue is...

CVE-2007-3376

CVE-2007-3376 affects Apple Safari 3.0.2 on Windows XP SP2. A buffer overflow in the title HTML tag can be triggered when a user bookmarks a page with a long title, allowing user‑assisted remote denial of service and potentially arbitrary code execution. Details in the NVD entry corroborate the i...

Fedora Core 4 : libwmf-0.2.8.3-8.1 (2006-804)

CVE-2006-3376 integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Core 4 : libwmf-0.2.8.3-8.2 (2006-832)

CVE-2006-3376: fix minor side-effect on 64bit platforms Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DSA-1194-1 : libwmf - integer overflow

It was discovered that an integer overflow in libwmf, the library to read Windows Metafile Format files, can be exploited to execute arbitrary code if a crafted WMF file is parsed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1194-1] New libwmf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1194-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 9th, 2006 http://www.debian.org/security/faq -...

RHEL 4 : libwmf (RHSA-2006:0597)

Updated libwmf packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Libwmf is a library for reading and converting Windows MetaFile vector graphics WMF. Libwmf is us...

Moderate: Red Hat Security Advisory: libwmf security update

Updated libwmf packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Libwmf is a library for reading and converting Windows MetaFile vector graphics WMF. Libwmf is us...

CVE-2006-3376

CVE-2006-3376 is an integer overflow in libwmf 0.2.8.4 (and older) related to the MaxRecordSize header in WMF files that enables remote code execution or crash when processing crafted WMF data. Affected software range includes libwmf and its use in wv, abiword, freetype, gimp, libgsf, and imagema...

CVE-2005-3376

The CVE-2005-3376 issue affects Kaspersky (version 5.0.372). It arises from a multiple interpretation error where a file containing BAT, HTML, or EML data with an MZ (EXE) magic byte is misclassified as a safe type, allowing it to be treated as non-executable by the scanner yet potentially execut...