bzip2 security update

CentOS Errata and Security Advisory CESA-2010:0703 Updated bzip2 packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

USN-986-1: bzip2 vulnerability

An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any application linked against libbz2 to crash or possibly execute code as the user running the program...

ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability

ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-042 April 2, 2010 -- CVE ID: CVE-2010-0528 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection:...

Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing of...

DEBIAN-CVE-2009-1720

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...

CVE-2009-1720

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...

[SECURITY] Fedora 7 Update: bzip2-1.0.4-11.fc7

Bzip2 is a freely available, patent-free, high quality data compressor. Bzip2 compresses files to within 10 to 15 percent of the capabilities of the best techniques available. However, bzip2 has the added benefit of being approximately two times faster at compression and six times faster at...

[SECURITY] Fedora 8 Update: bzip2-1.0.4-13.fc8

Bzip2 is a freely available, patent-free, high quality data compressor. Bzip2 compresses files to within 10 to 15 percent of the capabilities of the best techniques available. However, bzip2 has the added benefit of being approximately two times faster at compression and six times faster at...

CentOS 3 / 4 : bzip2 (CESA-2005:474)

Updated bzip2 packages that fix multiple issues are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Updated 13 February 2006 Replacement bzip2 packages for Red Hat Enterprise Linux 4 have been created as the original erratum packages...

CVE-2006-0303

Technical details about CVE-2006-0303 are not publicly available in the provided documents; none of the connected records supply affected product/version, root cause, impact, or remediation. Monitor for updates.

CVE-2006-0303: Undefined Security Weakness

Multiple unspecified vulnerabilities in the 1 publishing component, 2 Contact Component, 3 TinyMCE Compressor, and 4 other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors...

CVE-2005-4599

Cross-site scripting XSS vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter...

CVE-2005-4600

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...

CVE-2005-4600

CVE-2005-4600 describes a directory traversal vulnerability in TinyMCE Compressor PHP prior to 1.06. An attacker can cause the PHP script tiny_mce_gzip.php to read or include arbitrary files by supplying a trailing null byte (%00) in one of four parameters: theme, language, plugins, or lang. The ...

CVE-2005-4600

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...

CVE-2005-4599

The CVE-2005-4599 issue affects TinyMCE Compressor PHP prior to 1.06, with a Cross-site Scripting (XSS) vulnerability in tiny_mce_gzip.php exposed via the index parameter. The root cause is unvalidated input leading to script/HTML injection, allowing remote attackers to inject arbitrary web conte...

CVE-2005-4599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter...

CVE-2005-4600: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...

CVE-2005-4599

Cross-site scripting XSS vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter...

CVE-2005-4600

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...