[SECURITY] Fedora 10 Update: squirrelmail-1.4.17-2.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Chilkat Crypt - ActiveX Arbitrary File CreationExecution

Chilkat Crypt - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID:...

[SECURITY] Fedora 9 Update: openoffice.org-2.4.2-18.1.fc9

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞

BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet（SRLApplet.class，由sysreqlab2.jar或sysreqlab.jar提供），对Internet Explorer使用签名的ActiveX控件（sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll）。...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File...

CVE-2008-3471: Out-of-bounds Write

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File...

CVE-2008-4100

GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the...

[SECURITY] Fedora 8 Update: amarok-1.4.10-1.fc8

Amarok is a multimedia player with: - fresh playlist concept, very fast to use, with drag and drop - plays all formats supported by the various engines - audio effects, like reverb and compressor - compatible with the .m3u and .pls formats for playlists - nice GUI, integrates into the KDE look, b...

Security Update for the 2007 Microsoft Office System (KB951944)

A security vulnerability exists in the 2007 Microsoft Office System and the Compatibility Pack for the 2007 Office System that could allow remote code execution. This update resolves that vulnerability...

FreeBSD Security Advisory (FreeBSD-SA-04:13.linux.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:13.linux.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-04:09.kadmind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:09.kadmind.asc ADV FreeBSD-SA-04:09.kadmind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-05:21.openssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:21.openssl.asc ADV FreeBSD-SA-05:21.openssl.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

CVE-2008-1455: Undefined Security Weakness

A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted...

Security Update for 2007 Microsoft Office System (KB954038)

A security vulnerability exists in the Compatibility Pack for the 2007 Microsoft Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...

Security Update for 2007 Microsoft Office System (KB951596)

A security vulnerability exists in the Compatibility Pack for the 2007 Microsoft Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...

CVE-2008-3006: Undefined Security Weakness

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country...

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) Microsoft Security Bulletin MS08-051 – Critical

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution 949785 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft Office...

MS00-020:Windows 2000 Windows Station 非法访问漏洞

如果用户本地登录到一台Windows 2000机器，在某些特定条件下，可以获得对其他用户的widnows stations进程的访问权限。这个问题将允许一个低级别的用户的进程看到同一个session中另外一 个桌面的输入或输出数据，这可能包含口令等敏感信息。 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server - Microsoft Windows 2000 Advanced Server 微软已经发布了一个相应的补丁程序，您可以在下列地址下载： -...

[SECURITY] Fedora 7 Update: kdebase4-4.0.3-9.fc7

Core runtime requirements and applications for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts...

SA-2008-027 - Ubercart - Cross site scripting

When certain product features were being edited, node titles were being printed to the screen as entered by the user. If a store owner had granted product creation rights to a non-secure user, this would provide an opportunity for a malicious user to perform a cross site scripting attack when...