PT-2009-1066 · Libgd +3 · Gd +5

Name of the Vulnerable Software and Affected Versions: gd versions 2.0.28 through 2.0.33 gd-progs versions 2.0.28 through 2.0.33 gd-devel versions 2.0.28 through 2.0.33 PHP versions 5.2.11 and 5.3.x before 5.3.1 Description: The issue is related to the gdGetColors function in gd gd.c, which does...

SuSE9 Security Update : gd (YOU Patch Number 11578)

This update fixes multiple integer overflows in the gd library. Specially crafted files could leverage them to at least crash gd based applications. CVE-2007-3472, CVE-2007-3475, CVE-2007-3476, CVE-2007-3477, CVE-2007-3478 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

Gentoo Security Advisory GLSA 200907-01 (libwmf)

The remote host is missing updates announced in advisory GLSA 200907-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200907-01 : libwmf: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-01 libwmf: User-assisted execution of arbitrary code The embedded fork of the GD library introduced a 'use-after-free' vulnerability in a modification which is specific to libwmf. Impact : A remote attacker could entice a...

Mandrake Security Advisory MDVSA-2009:106 (libwmf)

The remote host is missing an update to libwmf announced via advisory MDVSA-2009:106. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Ubuntu USN-769-1 (libwmf)

The remote host is missing an update to libwmf announced via advisory USN-769-1. OpenVAS Vulnerability Test $Id: ubuntu7691.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7691.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-769-1 libwmf Authors: Thomas Rein...

Debian DSA-1796-1 : libwmf - pointer use-after-free

Tavis Ormandy discovered that the embedded GD library copy in libwmf, a library to parse windows metafiles WMF, makes use of a pointer after it was already freed. An attacker using a crafted WMF file can cause a denial of service or possibly the execute arbitrary code via applications using this...

acpid security update

CentOS Errata and Security Advisory CESA-2009:0474 Updated libwmf packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libwmf is a library for reading and...

[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1796-1 [email protected] http://www.debian.org/security/ Nico Golde April 7th, 2009 http://www.debian.org/security/faq -...

DSA-1796-1 libwmf - denial of service

Bulletin has no description...

Mandriva Linux Security Advisory : libwmf (MDVSA-2009:106-1)

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file CVE-2009-1364. The updated packages have been patched to prevent this. Update :...

libwmf -- embedded GD library Use-After-Free vulnerability

Secunia reports: A vulnerability has been reported in libwmf, which can be exploited by malicious people to cause a DoS Denial of Service or compromise an application using the library. The vulnerability is caused due to a use-after-free error within the embedded GD library, which can be exploite...

CVE-2009-1364

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file...

Design/Logic Flaw

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file...

CVE-2009-1364

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file...

CVE-2009-1364

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file...

CVE-2009-1364

CVE-2009-1364 is a use-after-free in the embedded GD library within libwmf 0.2.8.4. A remote attacker can crash the application or possibly execute arbitrary code by opening a crafted WMF file. The issue affects libwmf’s embedded GD code used by various apps; mitigation is to upgrade libwmf to pa...

CVE-2009-1364

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WMF file...

PT-2009-1069 · Gd +3 · Gd Library +4

Name of the Vulnerable Software and Affected Versions: libwmf versions 0.2.8.3 through 0.2.8.4 libwmf-devel versions 0.2.8.3 through 0.2.8.4 Description: The issue is related to a use-after-free vulnerability in the embedded GD library in libwmf, which allows context-dependent attackers to cause ...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : php5 vulnerabilities (USN-720-1)

It was discovered that PHP did not properly enforce phpadminvalue and phpadminflag restrictions in the Apache configuration file. A local attacker could create a specially crafted PHP script that would bypass intended security restrictions. This issue only applied to Ubuntu 6.06 LTS, 7.10, and 8....