109 matches found
RHEL 3 / 4 : libgsf (RHSA-2007:0011)
Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...
Moderate: libgsf security update
1.10.1-2 - Resolves: rhbz217949 CVE-2006-4514...
Moderate: Red Hat Security Advisory: libgsf security update
Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...
iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability
Multiple Vendor libgsf Heap Overflow Vulnerability iDefense Security Advisory 11.30.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 30, 2006 I. BACKGROUND The GNOME Structured File Library is a utility library for reading and writing structured file formats. This library replaces...
CVE-2006-4514
Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...
CVE-2006-4514
CVE-2006-4514 affects GNOME Structured File Library (libgsf) 1.14.0 and earlier than 1.14.2. The vulnerability is a heap-based buffer overflow in ole_info_read_metabat that, due to insufficient memory allocation in ole_init_info when handling large num_metabat values in OLE documents, can allow c...
CVE-2006-4514
Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...
CVE-2005-4514
CVE-2005-4514 concerns the Webwasher CSM Appliance Suite 5.x, where the encapsulation script mechanism uses case-sensitive detection of malicious tokens. This allows bypassing script detection by presenting tokens in mixed case (upper/lower). The vendor notes the issue could not be reproduced as ...