Tom Sawyer GET Extension Factory COM Object Instantiation Memory Corruption

Added: 06/19/2011 CVE: CVE-2011-2217 BID: 48099 Background Tom Sawyer Software produces a variety of data visualization, layout, and analysis tools. Problem Certain ActiveX controls in tsgetxu71ex552.dll and tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client...

CVE-2006-3589

The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...

CVE-2006-3589: Undefined Security Weakness

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key...