Fedora 13 : gimp-2.6.11-14.fc13 (2011-7397)

This update fixes buffer overflows in the PSP CVE-2010-4543, CVE-2011-1782, sphere-designer CVE-2010-4541, gfig CVE-2010-4542 and lighting CVE-2010-4540 plugins. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...

gimp security update

CentOS Errata and Security Advisory CESA-2011:0837 Updated gimp packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

Luch Web Designer - Multiple SQL Injections

Luch Web Designer - Multiple SQL Injections Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC ---...

Luch Web Designer - Multiple SQL Injections

Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 union select 1 from test.a...

DEBIAN-CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

CVE-2010-4541

CVE-2010-4541 affects GIMP 2.6.11 via the Sphere Designer plugin (loadit function). A stack-based buffer overflow can be triggered by a long Number of lights value in a plugin configuration file, enabling user-assisted remote exploitation and potentially crashing the application or executing arbi...

CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

PT-2011-1600

Name of the Vulnerable Software and Affected Versions GIMP version 2.6.11 Description The issue is a stack-based buffer overflow in the loadit function in the SPHERE DESIGNER plugin. This can be exploited by user-assisted remote attackers via a long "Number of lights" field in a plugin...

CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

CVE-2010-4541: Out-of-bounds Write

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

SA-CONTRIB-2010-105 - Outline Designer - Cross Site Request Forgery

Outline Designer allows for easier creation and management of items in a Book. The Outline Designer modules does not properly protect some of its paths against Cross Site Request Forgeries CSRF, allowing an attacker to get a user with the permission to administer site configuration to change any...

EximiousSoft Logo Designer v2.58 DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits =================================================================== EximiousSoft Logo Designer v2.58 DLL Hijacking Exploit dwmapi.dll =================================================================== || || | || o,7 || . o7 || 4||| ow, : / ...

Events Manager Wordpress Plugin 2.1 Blind SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================= - - Release date: May 10th, 2010 - - Discovered by: Danilo Massa - - Severity: High ============================================= I. VULNERABILITY - ------------------------- Events Manager Wordpress plugi...

Fedora 10 : kdelibs3-3.5.10-13.fc10 (2009-8020)

This update fixes several security issues in the KDE 3 compatibility version of KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the...

Fedora Core 10 FEDORA-2009-8020 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8020. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8020 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8020. OpenVAS Vulnerability Test $Id: fcore20098020.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8020 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...