Libtiff图形库多个安全漏洞

LibTiff是负责对TIFF图象格式进行编码/解码的应用库。 TIFF库中存在多个安全漏洞，具体如下： CVE-2006-3459 多个栈溢出漏洞可能允许执行任意代码。 CVE-2006-3460 JPEG解码器中存在堆溢出漏洞。 CVE-2006-3461 PixarLog解码器中存在堆溢出漏洞。 CVE-2006-3462 NeXT RLE解码器中存在堆溢出漏洞。 CVE-2006-3463 循环中16位的无符短型用于迭代32位的无符值，因此循环不会终止，导致死循环。 CVE-2006-3464...

PHP Apache 2 本地拒绝服务漏洞

'sapiapache2.c', 这个问题最终会影响PHP的5.1.0和4.4.1之前版本 Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix...

Debian DSA-942-1 : albatross - design error

A design error has been discovered in the Albatross web application toolkit that causes user-supplied data to be used as part of template execution and hence arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-959-1 : unalz - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered that unalz, a decompressor for ALZ archives, performs insufficient bounds checking when parsing file names. This can lead to arbitrary code execution if an attacker provides a crafted ALZ archive. %NASLMINLEVEL 70300 C Tenable Netwo...

Debian DSA-908-1 : sylpheed-claws - buffer overflows

Colin Leroy discovered several buffer overflows in a number of importer routines in sylpheed-claws, an extended version of the Sylpheed mail client, that could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-1129-1 : osiris - format string

Ulf Harnhammar and Max Vozeler from the Debian Security Audit Project have found several format string security bugs in osiris, a network-wide system integrity monitor control interface. A remote attacker could exploit them and cause a denial of service or execute arbitrary code. %NASLMINLEVEL...

Debian DSA-1083-1 : motor - buffer overflow

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in motor, an integrated development environment for C, C++ and Java, which may lead local attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Debian DSA-891-1 : gpsdrive - format string

Kevin Finisterre discovered a format string vulnerability in gpsdrive, a car navigation system, that can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

Debian DSA-1131-1 : apache - buffer overflow

Mark Dowd discovered a buffer overflow in the modrewrite component of apache, a versatile high-performance HTTP server. In some situations a remote attacker could exploit this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Debian DSA-1041-1 : abc2ps - buffer overflows

Erik Sjolund discovered that abc2ps, a translator for ABC music description files into PostScript, does not check the boundaries when reading in ABC music files resulting in buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Debian DSA-1188-1 : mailman - format string

Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3636 Moritz Naumann discovered several cross-site scripting problems that could allow remote...

Debian DSA-961-1 : pdfkit.framework - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf which are also present in pdfkit.framework, the GNUstep framework for rendering PDF content, and which can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code...

Debian DSA-936-1 : libextractor - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in libextractor, a library to extract arbitrary meta-data from files, and which can lead to a denial of service by crashing the application or...

Debian DSA-932-1 : kdegraphics - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. The same code is present in kpdf which is part of the...

[SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1160-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, potentially involving the GE_received_key function in keys.c. The description across sources consistently identifies the...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...

[Full-disclosure] CYBSEC - Security Advisory: httprint Multiple Vulnerabilities

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryhttprintMultipleVulnerabilities.pdf CYBSEC S.A. www.cybsec.com Advisory Name: httprint Multiple Vulnerabilities ========== Vulnerability Class: Denial of Service, Arbitrary...

[SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 853-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...