Medium severity flaw in QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110310 Date: 10th March 2011 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...

Front Accounting 2.3RC2 - Multiple SQL Injections

Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected. Affected Platforms: Any running...

Rekonq 0.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20100818 Date: 18th August 2010 Author: Tim Brown URL: / Product: Rekonq 0.5 Vendor: Andrea Diamantini Risk: Medium Summary The Rekonq web browser is vulnerable to Javascript injection in a number of components of...

Medium security hole in Rekonq web browser

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20100818 Date: 18th August 2010 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: Rekonq 0.5 http://rekonq.sourceforge.net/ Vendor: Andr...

Mandriva Linux Security Advisory : libtheora (MDVSA-2010:043)

A vulnerability have been discovered and corrected in libtheora : Integer overflow in libtheora in Xiph.Org Theora before 1.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions CVE-2009-3389. The updated...

Integer overflow

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

[USN-784-1] ImageMagick vulnerability

=========================================================== Ubuntu Security Notice USN-784-1 June 09, 2009 imagemagick vulnerability CVE-2009-1882 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS...

USN-784-1: ImageMagick vulnerability

It was discovered that ImageMagick did not properly verify the dimensions of TIFF files. If a user or automated system were tricked into opening a crafted TIFF file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

CVE-2008-1419

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

DEBIAN-CVE-2008-1419

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

NDSA20071016.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20071016 Date: 16th October 2007 Author: Tim Brown URL: / Product: SiteBar 3.3.8 Vendor: Ondřej Brablc, David Szego and SiteBar Team Risk: High Summary This advisory comes in 4 related parts: 1 SiteBar application h...

NDSA20070412.txt

Nth Dimension Security Advisory NDSA20070412 Date: 12th April 2007 Author: Tim Brown URL: / Product: DSL-G624T router V3.00B01T02.UK-A.20060208 Vendor: D-Link Risk: Medium Summary Following the Securiteam posting "D-Link DSL-G604T Wireless Router Directory Traversal" which described a directory...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2006-7174

PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this may be the same issue as CVE-2006-5235...

CVE-2006-7174

The CVE-2006-7174 entry describes a PHP remote file inclusion vulnerability in phpBB’s Dimension module, specifically in includes/functions.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to the phpbb_root_path parameter. The issue is categorized as a remote code execut...

CVE-2006-7096

Buffer overflow in the networkhosthandlejoin function in host.c in dimension 3 engine dim3 1.5 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

PhpBB Module Dimension Remote File Include

=============================================================================== =Bug was found in the part of phpBB = =Dork : "Powered by Dimension" = =Expl : includes/functions.php?phpbbrootpath= = =Source Code : http://www.xs4all.nl/hkicken/plusxl20/phpbb2plusxl20272.zip = =Found by : Rendy &...

PhpBB Module Dimension Remote File Include

=============================================================================== =Bug was found in the part of phpBB = =Dork : "Powered by Dimension" = =Expl : includes/functions.php?phpbbrootpath= = =Source Code : http://www.xs4all.nl/hkicken/plusxl20/phpbb2plusxl20272.zip = =Found by : Rendy &...