[SECURITY] Fedora Core 5 Update: yelp-2.14.3-5.fc5

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

Security fix for the ALT Linux 5 package MySQL version 5.0.41-alt1

May 28, 2007 Konstantin Lepikhov 5.0.41-alt1 - 5.0.41 release. - Fix CVE-2007-2583 DoS Failure to Handle Exceptional Conditions. - Added patches from BK: + BUG28337 NOT EXISTS with GROUP BY behaves different in 5.0.40. - Update ALTLinux patches: + install-db patch. + username-length patch. -...

CVE-2007-2424: Undefined Security Weakness

PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...

DEBIAN-CVE-2007-1997

Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...

Microsoft Windows Help File Unspecified Heap Overflow Vulnerability

Description The Microsoft Windows Help File viewer is reported prone to a heap-overflow vulnerability because it fails to perform boundary checks before copying user-supplied data into insufficiently sized memory buffers. This vulnerability presents itself when the application handles a specially...

Re: XSS vulnerability in the online help system of several Cisco products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Cassio, On Thu, Mar 15, 2007 at 05:41:31PM -0000, [email protected] wrote: What: cross-site scripting XSS vulnerability in the online help system distributed with several Cisco products Release Date: 03-15-2007 Application: 14 different applications...

XSS vulnerability in the online help system of several Cisco products

What: cross-site scripting XSS vulnerability in the online help system distributed with several Cisco products Release Date: 03-15-2007 Application: 14 different applications verified by Cisco up to now. For a complete list of affected products see...

Cisco multiple products help system crossite scripting

Crossite scripting on HTML help pages...

Cisco Online Help System Cross-Site Scripting Vulnerability

Multiple Cisco products contain a vulnerability in the Online Help System that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability exists because the search feature of the web-based Online Help System interface fails to sufficiently filter...

[SECURITY] Fedora Core 5 Update: yelp-2.14.3-4.fc5

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

Microsoft Windows HTML Help ActiveX Control Memory Corruption (MS07-008; CVE-2007-0214)

Microsoft HTML Help is the help system for Microsoft Windows platform. HTML Help ActiveX control is an application used for help navigation.A remote code execution vulnerability exists in Microsoft HTML Help ActiveX control Hhctrl.ocx. The vulnerability is due to a buffer overflow error in the HT...

CVE-2007-0214

CVE-2007-0214 affects the HTML Help ActiveX control (hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2/Professional, and Windows Server 2003 SP1. The vulnerability arises from improper input validation in HTML Help ActiveX methods, leading to a remote code execution flaw if a user visits a specia...

Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft HTML Help ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya Agent Access Avaya Basic Call Management System Reporti...

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution 928843 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

MS07-008: Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

Microsoft HTML Help ActiveX control fails to properly validate input

Overview The Microsoft HTML Help ActiveX control fails to properly validate input, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The HTML Help Control HHCtrl Object is a Windows ActiveX control that provides the ability to view...

Microsoft Windows HTML Help ActiveX code execution

It's possible to access unsafe functions from web page. Vulnerability can be used for hidden malware installation...

CVE-2007-0647

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function...

Format string

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function...

CVE-2007-0647: Undefined Security Weakness

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function...