[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

CVE-2007-4033

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

CVE-2007-4033

CVE-2007-4033 concerns a buffer overflow in the intT1_EnvGetCompletePath function (t1lib 5.1.1, lib/t1lib/t1env.c) that can be triggered by a long FileName parameter, enabling context-dependent attackers to execute arbitrary code. Connected documents (e.g., MiracleLinux AXSA-2007-64:02) enumerate...

.uni File Upload Detection

Binary data 4033.prm...

CVE-2005-4033

Nodezilla 0.4.13-corno-fulgure is affected by CVE-2005-4033. The issue stems from inadequate protection of the evl_data directory when it is not guarded by PRIVATEDATADIR in nodezilla.ini, which could allow remote attackers to access and disclose sensitive information. The vulnerability is catego...