CVE-2012-4433

CVE-2012-4433 affects GEGL (Generic Graphics Library) with the patch in GEGL 0.2.0 addressing multiple integer overflows in operations/external/ppm-load.c. The flaw allows a remote attacker to crash the application or potentially execute code by supplying a large width or height in a PPM image, t...

CentOS Update for gegl CESA-2012:1455 centos6

Check for the Version of gegl OpenVAS Vulnerability Test CentOS Update for gegl CESA-2012:1455 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 6 : gegl (CESA-2012:1455)

Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 : gegl (RHSA-2012:1455)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1455 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. An integer overflow flaw, leading to a heap-based buffer overflow, was fou...

Moderate: Red Hat Security Advisory: gegl security update

Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gegl security update

0.1.2-4 - avoid buffer overflow in ppm loader CVE-2012-4433...

SuSE 11.1 Security Update : mailman (SAT Patch Number 4433)

mailman was updated to version 2.1.14 to fix several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 / CVE-2010-3090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

CVE-2010-4433

CVE-2010-4433 affects Oracle Solaris 10, with a vulnerability in the Ethernet/Driver sub-component that could allow remote attackers to compromise confidentiality. The impact is partial confidentiality compromise via network access; details on the exact vectors, root cause, or exploitable conditi...

CVE-2009-4433

CVE-2009-4433 affects IDevSpot iSupport 1.8 and earlier. The XSS flaws enable remote injection via: (a) the 5 or (b) 9 field in post to ticket_function.php, reachable via ticket_submit.php and index.php; (c) the which parameter to function.php; or (d) the which parameter to index.php, related to ...

CVE-2008-4433

CVE-2008-4433 describes an SQL injection in the RMSOFT MiniShop module 1.0 for Xoops. The vulnerability is triggered via the itemsxpag parameter in search.php, allowing remote attackers to execute arbitrary SQL commands. The affected component is the MiniShop module’s search functionality, and th...

Check for Windows Update Traffic

Binary data 4433.prm...

SuSE 10 Security Update : KDE (ZYPP Patch Number 4433)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system. CVE-2007-4569 JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

CVE-2007-4433

The CVE-2007-4433 entry describes an XSS in the Text File Search ASP.NET edition, affecting the component textfilesearch.aspx where a remote attacker can inject arbitrary web script or HTML via the search field. This is documented with a CVSS v2 base score of 4.3 (Medium) and an I/P impact profil...

CVE-2006-4433

PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third‑party session handlers. The underlying cause is a design limitation in PHP’s session ID handling, which may allow an attacker to insert PHP code into the PHPSESSID stored in the ...

CVE-2005-4433

CVE-2005-4433 describes an XSS vulnerability in the search.php component of Esselbach Storyteller CMS 1.8. The vulnerability arises from using the query parameter in the Search field, allowing remote attackers to inject arbitrary web script or HTML. The available records explicitly cite this CMS ...