7092 matches found
CVE-2007-4759
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2007-4760
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...
Buffer overflow
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...
CVE-2007-4758
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...
Cross site scripting
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...
CVE-2007-4759
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2007-4760
CVE-2007-4760 relates to the Javadoc tool in Cosminexus Developer's Kit for Java (Cosminexus 7/7.5), which can produce HTML with cross-site scripting (XSS). Connected documents reference the broader XSS issue in Javadoc (CVE-2007-3503) and related Java vulnerabilities; exploitation details are no...
CVE-2007-4759
Technical details about CVE-2007-4759 are not publicly available in the provided connected documents; the materials reiterate a general DoS via image-processing APIs in Cosminexus 4–7. Monitor for updates.
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : java (jre, jdk) (SSA:2007-243-01)
Sun has released security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. One such advisory may be found here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 Updated versions of both the jre and jdk packages are provided whic...
[slackware-security] java (jre, jdk)
Sun has released security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. One such advisory may be found here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 Updated versions of both the jre and jdk packages are provided whic...
Content Construction Kit - Cross site scripting
The Content Construction Kit CCK allows site admins to create and customize node fields. The Nodereference module included in the CCK bundle defines fields referencing other nodes. Two cross-site scripting XSS vulnerabilities were discovered : when a nodereference field is displayed using the...
DEBIAN-CVE-2007-4197
icat in Brian Carrier The Sleuth Kit TSK before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service NULL dereference and application crash and prevent examination of certain NTFS files via a malformed NTFS image...
CVE-2007-4197
icat in Brian Carrier The Sleuth Kit TSK before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service NULL dereference and application crash and prevent examination of certain NTFS files via a malformed NTFS image...
CVE-2007-4195
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain ext2fs files via a malformed ext2fs image...
DEBIAN-CVE-2007-4196
icat in Brian Carrier The Sleuth Kit TSK before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service long loop and prevent examination of certain NTFS files via a malformed NTFS image...
DEBIAN-CVE-2007-4195
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain ext2fs files via a malformed ext2fs image...
DEBIAN-CVE-2007-4200
ntfs.c in fsstat in Brian Carrier The Sleuth Kit TSK before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a...
CVE-2007-4196
icat in Brian Carrier The Sleuth Kit TSK before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service long loop and prevent examination of certain NTFS files via a malformed NTFS image...
CVE-2007-4200
ntfs.c in fsstat in Brian Carrier The Sleuth Kit TSK before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a...
Design/Logic Flaw
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain ext2fs files via a malformed ext2fs image...