raptor: XML External Entity (XXE) attack via RDF files

Redland Raptor aka libraptor before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity XXE declaration and reference in an RDF document...

Important: Red Hat Security Advisory: raptor security update

Updated raptor packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2012-0037

Redland Raptor aka libraptor before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity XXE declaration and reference in an RDF document...

DSA-2438-1 raptor - programming error

Bulletin has no description...

[SECURITY] Fedora 14 Update: pl-5.7.11-7.fc14

ISO/Edinburgh-style Prolog compiler including modules, autoload, libraries, Garbage-collector, stack-expandor, C/C++-interface, GNU-readline interface, very fast compiler. Including packages clib Unix process control and sockets, cpp C++ interface, sgml reading XML/SGML, sgml/RDF reading RDF into...

[SECURITY] Fedora 11 Update: python-4Suite-XML-1.0.2-8.fc11

4Suite-XML is a suite of Python modules for XML and RDF processing. Its major components include the following: Ft.Xml.Domlette: A very fast, lightweight XPath-oriented DOM. Ft.Xml.XPath: An XPath 1.0 implementation for Domlette documents. Ft.Xml.Xslt: A robust XSLT 1.0 processor. Ft.Lib: Various...

[SECURITY] Fedora 10 Update: python-4Suite-XML-1.0.2-8.fc10

4Suite-XML is a suite of Python modules for XML and RDF processing. Its major components include the following: Ft.Xml.Domlette: A very fast, lightweight XPath-oriented DOM. Ft.Xml.XPath: An XPath 1.0 implementation for Domlette documents. Ft.Xml.Xslt: A robust XSLT 1.0 processor. Ft.Lib: Various...

[SECURITY] Fedora 11 Update: planet-2.0-10.fc11

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

Memory corruption

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

CVE-2009-2464

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

CVE-2009-2464

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

Mozilla crash with multiple RDFs in XUL tree

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

CVE-2009-2464: Undefined Security Weakness

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

CVE-2009-2464

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to loading multip...

Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption

Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/35775/info Mozilla Firefox and Thunderbird are prone to a remote memory-corruption vulnerability that attackers can exploit to cause denial-of-service conditions and...

Fedora Update for liferea FEDORA-2007-2725

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-2725 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for liferea FEDORA-2007-1146

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-1146 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for liferea FEDORA-2007-3952

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-3952 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for liferea FEDORA-2007-3962

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-3962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for liferea FEDORA-2007-3701

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-3701 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...