MGASA-2017-0223 Updated libraw packages fix security vulnerabilities

A memory corruption in parsetiffifd function CVE-2017-6886. A memory corruption via e.g. a specially crafted KDC file parsetiffifd CVE-2017-6887. An integer overflow error within the "foveonloadcamf" function CVE-2017-6889. A boundary error within the "foveonloadcamf" function CVE-2017-6890...

CVE-2017-6889

An integer overflow error within the "foveonloadcamf" function dcrawfoveon.c in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow...

CVE-2017-6889

LibRaw-demosaic-pack-GPL2 is affected by CVE-2017-6889 due to an integer/heap overflow in foveon_load_camf() in dcraw_foveon.c, prior to version 0.18.2. The issue is described as a heap-based buffer overflow, with referenced advisories noting potential denial of service. A fix exists in LibRaw 0....

CVE-2015-6889

...

CVE-2015-6889

CVE-2015-6889 is rejected/not used; this ID does not represent an active vulnerability entry.

DEBIAN-CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option...

CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option...

CVE-2013-6889

GNU Rush 1.7 is affected by a privilege handling flaw in which the process fails to drop privileges, allowing local users to read arbitrary files through the --lint option. The vulnerability stems from improper privilege separation in the affected binary, enabling a local attacker to access sensi...

CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 6889)

This update of ethereal fixes : - Several buffer overflows in the LWRES dissector. CVE-2010-0304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid45078;...

CVE-2008-6889

The CVE-2008-6889 entry describes an SQL injection vulnerability in Merchantsadd.asp of ASPReferral 5.3. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted AccountID parameter, enabling potential unauthorized access or data manipulation. The NVD metrics indi...

CVE-2006-6889

CVE-2006-6889 affects FreeStyle Wiki (fswiki) 3.6.2 and earlier. The issue is that sensitive information (including passwords) is stored under the web root with insufficient access control, allowing remote attackers to obtain passwords by directly requesting config/user.dat. The provided document...