[SECURITY] [DSA 1923-1] New libhtml-parser-perl packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1923-1 [email protected] http://www.debian.org/security/ Nico Golde October 27th, 2009 http://www.debian.org/security/faq -...

CVE-2009-3627

The decodeentities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service infinite loop via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character...

CVE-2009-3627

CVE-2009-3627 affects the Perl HTML-Parser (modules) where the decode_entities() function in util.c can loop indefinitely when parsing certain incomplete SGML numeric character references, causing a denial of service. The issue occurs in HTML-Parser prior to version 3.63. Impact is a partial avai...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013177 within the Su...

Fedora Core 9 FEDORA-2009-3627 (pam_ssh)

The remote host is missing an update to pamssh announced via advisory FEDORA-2009-3627. OpenVAS Vulnerability Test $Id: fcore20093627.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3627 pamssh Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Gentoo Security Advisory GLSA 200601-02 (kdegraphics, kpdf, koffice, kword)

The remote host is missing updates announced in advisory GLSA 200601-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200601-17 (xpdf poppler gpdf libextractor pdftohtml)

The remote host is missing updates announced in advisory GLSA 200601-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3627

Apple QuickTime before 7.5.5 does not properly handle 1 MDAT atoms in MP4 video files within QuickTimeH264.qtx, 2 MDAT atoms in mov video files within QuickTimeH264.scalar, and 3 AVC1 atoms in an unknown media type within an unspecified component, which allows remote attackers to execute arbitrar...

Apple QuickTime Movie/PICT/QTVR多个远程漏洞

BUGTRAQ ID: 31086 CVE ID：CVE-2008-3615 CVE-2008-3635 CVE-2008-3624 CVE-2008-3625 CVE-2008-3614 CVE-2008-3626 CVE-2008-3627 CVE-2008-3628 CVE-2008-3629 CNCVE ID：CNCVE-20083615 CNCVE-20083635 CNCVE-20083624 CNCVE-20083625 CNCVE-20083614 CNCVE-20083626 CNCVE-20083627 CNCVE-20083628 CNCVE-20083629...

CVE-2008-3627

Apple QuickTime before 7.5.5 is affected by CVE-2008-3627 due to malformed MDAT atoms in MP4 (QuickTimeH264.qtx) and in mov files (QuickTimeH264.scalar), plus AVC1 atoms in an unknown type. Exploitation via a crafted H.264 movie could lead to arbitrary code execution or a denial of service (heap ...

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-062 September 9, 2008 -- CVE ID: CVE-2008-3627 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details: This vulnerability allows...

ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability

ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-061 September 9, 2008 -- CVE ID: CVE-2008-3627 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details: This vulnerability allows...

Debian Security Advisory DSA 1008-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1008-1. Marcelo Ricardo Leitner noticed that the current patch in DSA 932 CVE-2005-3627 for kpdf, the PDF viewer for KDE, does not fix all buffer overflows, still allowing an attacker to execute arbitrary code. The old...

Debian Security Advisory DSA 940-1 (gpdf)

The remote host is missing an update to gpdf announced via advisory DSA 940-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 1930)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627 / CVE-2006-3628 / CVE-2006-3629 / CVE-2006-3630 / CVE-2006-3631 / CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : ethereal (ethereal-1932)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627, CVE-2006-3628, CVE-2006-3629, CVE-2006-3630, CVE-2006-3631, CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

CVE-2007-3627

CVE-2007-3627 concerns PHP Lite Calendar Express 2.2 with multiple SQL injection flaws exploitable via the cid parameter in login.php, auth.php, and subscribe.php. The vulnerability allows remote attackers to inject arbitrary SQL commands. The note states that month.php, year.php, week.php, and d...

Debian DSA-931-1 : xpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...