CentOS 7 : icoutils (CESA-2017:0837)

An update for icoutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Scientific Linux Security Update : icoutils on SL7.x x86_64 (20170322)

Security Fixes : - Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. CVE-2017-5208, CVE-2017-5333, CVE-2017-6009 - A...

Important: Red Hat Security Advisory: icoutils security update

An update for icoutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RedHat Update for icoutils RHSA-2017:0837-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for icoutils FEDORA-2017-e8460ebed6

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-854-1 : icoutils security update

Icoutils is a set of programs that deal with MS Windows icons and cursors. Resources such as icons and cursors can be extracted from MS Windows executable and library files with wrestool. Three vulnerabilities has been found in these tools. CVE-2017-6009 A buffer overflow was observed in wrestool...

[SECURITY] [DSA 3807-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3807-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2017 https://www.debian.org/security/faq -...

CVE-2017-6010

CVE-2017-6010 affects icoutils: a buffer overflow in the extract_icons function (extract.c) can be triggered by processing a corrupted ICO file, causing icotool to crash (DoS). Documented across multiple advisories (Debian DSA-3807-1; DLA-854-1; CentOS/CESA-2017:0837; IBM PowerKVM bulletin; Gento...

CVE-2015-6010

CVE-2015-6010 affects Web Reference Database (refbase) versions 0.9.6 and earlier/bleeding-edge before 2015-01-08, with multiple vulnerabilities enabling remote XSS via numerous parameters (e.g., error.php: errorNo/errorMsg; duplicate_manager.php: viewType; query_manager.php: queryAction, display...

CVE-2014-6010

CVE-2014-6010 concerns the Android app Rasta Weed Widgets HD (aw.awesomewidgets.rastaweed) version 4, where the component handling SSL/TLS does not verify X.509 certificates. The root cause is certificate validation bypass, enabling MITM attackers to spoof servers and disclose sensitive data via ...

CVE-2013-6010

CVE-2013-6010 is an XSS vulnerability in the WordPress Comment Attachment plugin (version 1.0). The issue allows injection of arbitrary script/HTML via the Attachment field title. Exploitation details are not provided in the connected documents, but multiple sources confirm the plugin 1.0 XSS beh...

CVE-2008-6010

creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6631...

Design/Logic Flaw

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

DEBIAN-CVE-2008-1483

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

CVE-2008-1483

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

CVE-2007-6010

CVE-2007-6010 affects pioneers (formerly gnocatan) 0.11.3. The vulnerability allows remote denial of service (daemon crash) via unspecified vectors that trigger an assert error. The issue is reportedly related to an incomplete fix for CVE-2007-5933. Connected sources (NVD, OSV, Debian, Gentoo GLS...

Information disclosure

The RFCSTARTPROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information external RFC server configuration data via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague...

CVE-2006-6010

CVE-2006-6010 affects SAP systems exposing the RFC_SYSTEM_INFO SOAP service (/sap/bc/soap/rfc) which can disclose sensitive information such as operating system and SAP version. The vulnerability centers on the RFC_SYSTEM_INFO function, enabling information gathering through the SAP RFC Library e...

openssh may set DISPLAY even if it's unable to listen on respective port

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

CVE-2025-6010

...