5917 matches found
CVE-2008-3533
Format string vulnerability in the windowerror function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within 1 man or 2 ghelp URI...
openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5506)
This update of gnome-screensaver disallows local users to read the contents of the clipboard for a locked screen using ctrl-v. CVE-2007-6389 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
libxslt: Execution of arbitrary code
Background libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML. Description Chris Evans Google Security reported that the libexslt library that is part of libxslt is affected by a heap-based buffer overflow in the RC4...
[SECURITY] Fedora 8 Update: galeon-2.0.4-4.fc8.3
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
[SECURITY] Fedora 8 Update: epiphany-2.20.3-6.fc8
epiphany is a simple GNOME web browser based on the Mozilla rendering engine...
[SECURITY] Fedora 8 Update: yelp-2.20.0-11.fc8
Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...
[SECURITY] Fedora 8 Update: ruby-gnome2-0.17.0-0.3.rc1.fc8
This is a set of bindings for the GNOME-2.x libraries for use from Ruby...
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-9.fc8
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-12.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
[SECURITY] Fedora 8 Update: devhelp-0.16.1-9.fc8
An API document browser for GNOME 2...
[SECURITY] Fedora 8 Update: gnome-python2-extras-2.19.1-16.fc8
The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...
[SECURITY] Fedora 9 Update: yelp-2.22.1-4.fc9
Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...
[SECURITY] Fedora 9 Update: devhelp-0.19.1-3.fc9
An API document browser for GNOME 2...
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-3.fc9
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
Gnome屏保程序NIS认证本地非授权访问漏洞
BUGTRAQ ID: 28575 CVECAN ID: CVE-2008-0887 gnome-screensaver是用于取代xscreensaver的屏保程序。 gnome-screensaver验证用户口令的方式存在漏洞，如果启用了远程NIS认证服务器的话，能够导致网络中断的本地攻击者就可以导致gnome-screensaver崩溃，这样就打开了锁定的屏幕。 GNOME gnome-screensaver 2.22.1 GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Gnome屏保程序本地信息泄露漏洞
BUGTRAQ ID: 30096 CVECAN ID: CVE-2007-6389 gnome-screensaver是用于取代xscreensaver的屏保程序。 当登录用户返回并打开锁定的会话时，gnome-screensaver的Leave message功能会向该用户发送一条消息。这时如果本地攻击者执行了Ctrl+V操作的话，就可以读取X选择和剪贴板缓冲区的敏感信息。 GNOME gnome-screensaver 2.20 GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Gnome Screensaver本地信息泄漏漏洞
BUGTRAQ ID: 30096 CVE ID：CVE-2007-6389 CNCVE ID：CNCVE-20076389 Gnome Screensaver是一款屏幕保护管理程序。 Gnome Screensaver存在信息泄漏问题，本地攻击者可以利用漏洞获得剪贴板中的敏感信息。 屏幕保护管理程序包含一个功能，允许在返回解锁会话时返回消息给登录用户，物理能访问系统的攻击者可以通过Ctrl+V并使用点鼠标中键在解锁会话时获得剪贴板内容信息，导致敏感信息泄漏。 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .5 Linux kernel...
PCRE 规则表达式堆缓冲区溢出漏洞
BUGTRAQ ID: 30087 CVE ID：CVE-2008-2371 CNCVE ID：CNCVE-20082371 PCREPerl兼容正则表达式库是一款开放源代码的软件，可提供正则表达式支持。 PCRE pcrecompile.c文件存在堆溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当PCRE在启动模式下指定选项时，为了避免将其不需要编译到字节代码，如通过pcrecompile选项指定的方式传送回调用程序如/?ia|b/ ==...