CVE-2009-4937

CVE-2009-4937 describes an XSS in Small Pirate (SPirate) 2.1. An attacker can inject arbitrary script/HTML via an onmouseover in an img BBCode tag inside a url BBCode tag. The records consistently cite Cross-site scripting without details on exploit status or affected versions beyond 2.1. The con...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2009:070)

senddoc uses temporary files /tmp/log.obr.4043 in a insecure way which enables local attackers to overwrite arbitrary files by using a symlink attack CVE-2008-4937. This update provides fix for that vulnerability. Update : Further this update is a rebuild against lastest xulrunner 1.9.0.6...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

Ubuntu: Security Advisory (USN-677-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:070 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:070. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:070 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:070. OpenVAS Vulnerability Test $Id: mdksa2009070.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:070 openoffice.org Authors: Thomas Reinke Copyright: Copyright ...

Ubuntu USN-677-2 (OpenOffice)

The remote host is missing an update to OpenOffice announced via advisory USN-677-2. Original advisory details: Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker mig...

Ubuntu: Security Advisory (USN-677-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-677-2: OpenOffice.org Internationalization update

USN-677-1 fixed vulnerabilities in OpenOffice.org. The changes required that openoffice.org-l10n also be updated for the new version in Ubuntu 8.04 LTS. Original advisory details: Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were...

Gentoo Security Advisory GLSA 200812-13 (openoffice openoffice-bin)

The remote host is missing updates announced in advisory GLSA 200812-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-677-1: OpenOffice.org vulnerabilities

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

CVE-2008-4937

senddoc in OpenOffice.org OOo 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr. temporary file...

CVE-2008-4937

CVE-2008-4937 affects OpenOffice.org’s senddoc in version 2.4.1, where a local attacker can exploit a symlink race on a /tmp/log.obr.##### file to overwrite arbitrary files. The vulnerability arises from insecure temporary-file handling, permitting local privilege impact (I: Partial; A: Partial) ...

CVE-2006-4937

lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display EWARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages...

CVE-2006-4937

CVE-2006-4937 impacts Moodle prior to 1.6.2. The vulnerable code is in lib/setup.php, which sets the error reporting level to 7 to display E_WARNING messages even when debugging is disabled. This could allow remote authenticated users to obtain sensitive information by triggering warning messages...