CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

DEBIAN-CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

CVE-2006-3739

CVE-2006-3739 is associated with the X11 server (X.Org/XFree86) vulnerability described as a heap-based overflow triggered by crafted Adobe Font Metrics files. Connected advisories reference Solaris 10 patches for Xsun (X11 6.6.2) with CVE-2006-3739 included in the patch sets (e.g., 119060-64 on ...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

Skype URI handling routine contains a buffer overflow

Overview A buffer overflow in Skype may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. There is a buffer overflow in the routines that handle Skype-specific URIs callto:// or skype://. The buffer overflow may...

WebEOC is vulnerable to cross-site scripting attacks

Overview WebEOC contains multiple cross-site scripting vulnerabilities that may allow a remote attacker to inject and execute arbitrary script using a vulnerable WebEOC site. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate,...

Debian DSA-279-1 : metrics - insecure temporary file creation

Paul Szabo and Matt Zimmerman discovered two similar problems in metrics, a tools for software metrics. Two scripts in this package, 'halstead' and 'gatherstats', open temporary files without taking appropriate security precautions. 'halstead' is installed as a user program, while 'gatherstats' i...

CVE-2003-0202

The 1 halstead and 2 gatherstats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0202

CVE-2003-0202 affects the metrics package (version 1.0); the halstead and gather_stats scripts open temporary files insecurely, enabling a local attacker to overwrite files via a symlink attack. Debian advisory DSA-279-1 fixes insecure temporary file creation (metrics 1.0-1.1). OpenVAS entries an...

CVE-2003-0202: Undefined Security Weakness

The 1 halstead and 2 gatherstats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

Oracle9i Database contains buffer overflow in FROM_TZ() function

Overview Oracle9i Database contains a buffer overflow in the FROMTZ function which could allow anyone who can query the server to execute arbitrary code or access data with the privileges of the vulnerable process. Description A buffer overflow exists in the FROMTZ function. This function is...

RIP Detection

RIP is an Interior Gateway Protocol and is based on the distance vector routing algorithm. Routing tables may disclose your internal network architecture and help a remote attacker. C Tenable Network Security, Inc. References: RFC 1058 Routing Information Protocol RFC 2453 RIP Version 2 0 1 2 3 4...

[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 279-1 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 279-1 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...

DSA-279 metrics - insecure temporary file creation

Paul Szabo and Matt Zimmerman discovered two similar problems in metrics, a tools for software metrics. Two scripts in this package, "halstead" and "gather\stats", open temporary files without taking appropriate security precautions. "halstead" is installed as a user program, while "gather\stats"...

Microsoft Internet Explorer (MSIE) Content-Disposition vulnerabilities

Overview Microsoft Internet Explorer IE may handle executable content automatically, opening it with another application on the client host that may, in turn, instruct the operating system to execute the file. Description IE does not properly verify the Content-Disposition and Content-Type header...