Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...

SUSE-SA:2005:025: OpenOffice_org

The remote host is missing the patch for the advisory SUSE-SA:2005:025 OpenOfficeorg. This security update fixes a buffer overflow in OpenOfficeorg Microsoft Word document reader which could allow a remote attacker sending a handcrafted .doc file to execute code as the user opening the document i...

GLSA-200504-13 : OpenOffice.Org: DOC document Heap Overflow

The remote host is affected by the vulnerability described in GLSA-200504-13 OpenOffice.Org: DOC document Heap Overflow AD-LAB has discovered a heap overflow in the 'StgCompObjStream::Load' function when processing DOC documents. Impact : An attacker could design a malicious DOC document containi...

OpenOffice.Org: DOC document Heap Overflow

Background OpenOffice.org is an office productivity suite, including word processing, spreadsheets, presentations, drawings, data charting, formula editing, and file conversion facilities. Description AD-LAB has discovered a heap overflow in the "StgCompObjStream::Load" function when processing D...

Microsoft Word integer overflow

Integer overflow in signed/unsigned conversion during .doc file parsing...

openoffice -- DOC document heap overflow vulnerability

AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a DOC document 16 bit from a 32 bit integer is used for memory allocation, but the full 32 bit is used for further processing of the document. This can allow an attacker t...

[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 701-1 [email protected] http://www.debian.org/security/ Martin Schulze March 31st, 2005 http://www.debian.org/security/faq -...

CVE-2005-0454: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...

CVE-2004-1403: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...

CVE-2004-0901: Undefined Security Weakness

Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...

CVE-2004-0571: Undefined Security Weakness

Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901...

RHEL 2.1 : tetex (RHSA-2002:195)

Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...

CVE-2002-0686: Undefined Security Weakness

Buffer overflow in the search component for iPlanet Web Server iWS 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter...

CVE-1999-0678: Undefined Security Weakness

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server...

[SECURITY] New versions of hylafax avoid security problem

We have received a report that the faxsurvey script that was included in former releases of hylafax would execute arbitrary commands. Please be warned that this package doesnt contain a fix, the offending script is just removed. We recommend you upgrade your hylafax-doc package immediately. dpkg ...

PT-2005-5561 · Gentoo +4 · Gentoo Linux +11

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf-gnome version 0.22.0 gtk2 versions prior to 2.8.7 gdk-pixbuf-devel version 0.22.0 libgtk-common affected versions not specified libgtk2.0-dbg affected versions not specified gtk2-devel affected versions not specified gtk2-doc...