Debian DSA-2151-1 : openoffice.org - several vulnerabilities

Several security related problems have been discovered in the OpenOffice.org package that allows malformed documents to trick the system into crashes or even the execution of arbitrary code. - CVE-2010-3450 During an internal security audit within Red Hat, a directory traversal vulnerability has...

[SECURITY] [DSA 2151-1] New OpenOffice.org packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 2151-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2011 http://www.debian.org/security/faq -...

CVE-2009-3451

The CVE-2009-3451 entry describes a directory traversal vulnerability in RADactive I-Load’s WebCoreModule.ashx, affecting versions prior to 2008.2.5.0. The flaw enables remote attackers to read arbitrary files via unspecified vectors due to improper input handling in the WebCoreModule.ashx compon...

CVE-2008-3451

PhpWebGallery 1.7.0 and 1.7.1 are affected by CVE-2008-3451. Remote authenticated users with advisor privileges can obtain real e-mail addresses of other users by editing the target user’s profile. The NVD records a CVSS2 base score of 4.0 (Medium) with network attack vector and low complexity, h...

CVE-2007-3451

CVE-2007-3451 is a PHP remote file inclusion in the 6ALBlog project, specifically in admin/index.php. The vulnerability allows remote authenticated administrators to execute arbitrary PHP code by supplying a URL in the pg parameter, enabling code execution and potential compromise of the applicat...

CVE-2006-3451

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets CSS, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3451

CVE-2006-3451 is a remote code execution vulnerability in Microsoft Internet Explorer 5 SP4 and 6 caused by how chained CSS imports are handled during garbage collection, which can corrupt memory when a user views a crafted page. Exploitation could allow arbitrary code execution on an affected Wi...

CVE-2005-3451

Technical details for CVE-2005-3451 are not provided in the supplied documents. No affected products or fixes are specified. Monitor for updates.

CVE-2011-3451

CVE-2011-3451 entry is rejected/unused by its CNA and does not represent an active vulnerability entry.

CVE-2011-3451

...