CVE-2008-4619

CVE-2008-4619 affects Sun Solaris 9 RPC subsystem (rpcbind) via a crafted request to procedure 8 in program 100000, exploiting XDR_DECODE in taddr2uaddr and causing daemon crash (DoS). Connected documents tie this to libtirpc/TI-RPC implementations used by various vendors, with public advisories ...

CVE-2008-4619

creationtimestamp| type| source ---|---|--- 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6775...

Gentoo Security Advisory GLSA 200711-15 (flac)

The remote host is missing updates announced in advisory GLSA 200711-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1469-1] New flac packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1469-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

SuSE 10 Security Update : flac (ZYPP Patch Number 4569)

Multiple integer overflows in flac could potentially be exploited by attackers via specially crafted files to execute code in the context of the user opening the file. CVE-2007-4619 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-6277

Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...

Fedora Core 6 : flac-1.1.2-28 (2007-730)

Wed Oct 17 2007 - Bastien Nocera - 1.1.2-28 - Add patch from Takashi Iwai to fix CVE-2007-4619 332581 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CentOS 4 / 5 : flac (CESA-2007:0975)

An updated flac package to correct a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FLAC is a Free Lossless Audio Codec. The flac package consists of a FLAC encoder and...

RHEL 4 / 5 : flac (RHSA-2007:0975)

An updated flac package to correct a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FLAC is a Free Lossless Audio Codec. The flac package consists of a FLAC encoder and...

openSUSE 10 Security Update : flac (flac-4571)

Multiple integer overflows in flac could potentially be exploited by attackers via specially crafted files to execute code in the context of the user opening the file CVE-2007-4619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Important: flac security update

1.1.0-7.el4.2 - Add RHEL-5 patch to remove execstack requirement Related: rhbz 332591 1.1.0-7.el4.1 - Add patch from Takashi Iwai to fix CVE-2007-4619 Resolves: rhbz 332591...

iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities

Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 10.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2007 I. BACKGROUND Free Lossless Audio Codec FLAC is a popular file format for audio data compression. AOL Corp.'s Winamp media...

CVE-2007-4619

CVE-2007-4619 describes multiple heap/stack-based overflows in FLAC libFLAC before 1.2.1 that could allow remote code execution via malformed FLAC files. Public advisories confirm upgrades to FLAC 1.2.1 fix the issue (e.g., Debian DSA-1469-1, CentOS/RHEL advisories, Fedora updates). Affected prod...

CVE-2006-4619

The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...

CVE-2006-4619

The CVE-2006-4619 vulnerability affects Avira AntiVir PersonalEdition Classic 7.0 (build 151) in the start update window of update.exe. It allows local privilege escalation via a “Shatter” style attack targeting (1) IParam and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified p...

CVE-2005-4633

CVE-2005-4633 is a duplicate of CVE-2005-4619. The connected CVE-2005-4619 entry describes a SQL injection vulnerability in index.php of phpoutsourcing Zorum Forum (version 3.5 and earlier), exploitable via the rollid parameter in the showhtmllist method to execute arbitrary SQL commands. The 463...

CVE-2005-4619

CVE-2005-4619 affects Zorum Forum 3.5 and earlier (index.php showhtmllist) where the rollid parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. This is documented as a SQL injection vulnerability in Zorum/phpoutsourcing code; no patch/version det...

CVE-2005-4633

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4619. Reason: This candidate is a duplicate of CVE-2005-4619. Notes: All CVE users should reference CVE-2005-4619 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Solaris 8 (sparc) : 108993-67

SunOS 5.8: LDAP2 client, libc, libthread a. Date this patch was last updated by Sun : Mar/29/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 108994-67

SunOS 5.8x86: LDAP2 client, libc, libthre. Date this patch was last updated by Sun : Mar/30/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...