openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0409-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder CVE-2011-1167. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2010-4665

The CVE-2010-4665 issue affects LibTIFF’s tiffdump utility (tiffdump.c ReadDirectory) where an integer overflow can be triggered by a crafted TIFF with many directory entries, leading to a potential denial of service (application crash). Affected product/version: LibTIFF before 3.9.5 (tiffdump an...

SuSE9 Security Update : libtiff (YOU Patch Number 12702)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool. CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

Fedora 14 : libtiff-3.9.5-1.fc14 (2011-5304)

Update to libtiff 3.9.5, incorporating all our previous patches plus other fixes, notably the fix for CVE-2009-5022 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

CVE-2009-4665

CVE-2009-4665 affects CuteSoft Components Cute Editor for ASP.NET. Affected component: CuteSoft_Client/CuteEditor/Load.ashx. Vulnerability type: directory traversal via the file parameter using a .. payload, enabling reading of arbitrary files. Base CVSS v2 score 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) ...

CVE-2008-4665

CVE-2008-4665 affects PG Matchmaking. The vulnerability is a SQL injection in the id parameter of two PHP scripts (news_read.php and gifts_show.php), allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling leading to SQL injection. Impact: high (partial co...

CVE-2008-4665

creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6626...

CVE-2007-4665

CVE-2007-4665 affects the Firebird server prior to 2.0.2. It allows a remote attacker to cause a denial of service (daemon crash) via an XNET session that issues multiple simultaneous requests to register events ( CORE-1403 ). The vulnerability is documented across multiple references and is miti...

CVE-2006-4665

The CVE-2006-4665 issue affects MKPortal M1.1 Rc1, where the index.php script is vulnerable to cross-site scripting via the ind parameter, likely related to PHP_SELF. The underlying mechanism is an XSS in user-controllable input that can inject arbitrary script/HTML. Exploitation details (availab...

CVE-2018-4665

CVE-2018-4665 entry is rejected/not used by its CNA.