poppler security update

CentOS Errata and Security Advisory CESA-2010:0749 Updated poppler packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

RHEL 5 : poppler (RHSA-2010:0749)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0749 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. An uninitialized pointer use flaw was...

Spammers Using SHY Character to Hide Malicious URLs

Spammers have jumped on the little-used soft hyphen or SHY character to fool URL filtering devices. According to researchers at Symantec Corp., spammers are larding up URLs for sites they promote with the soft hyphen character, which many browsers ignore. Spammers aren’t shy about jumping humans...

Important: Red Hat Security Advisory: poppler security update

Updated poppler packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Debian DSA-2116-1 : freetype - integer overflow

Marc Schoenefeld has found an input stream position error in the way the FreeType font rendering engine processed input file streams. If a user loaded a specially crafted font file with an application linked against FreeType and relevant font glyphs were subsequently rendered with the X FreeType...

[SECURITY] [DSA-2116-1] New freetype packages integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2116-1 [email protected] http://www.debian.org/security/ Stefan Fritsch October 4, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2116-1] New freetype packages integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2116-1 [email protected] http://www.debian.org/security/ Stefan Fritsch October 4, 2010 http://www.debian.org/security/faq -...

DSA-2116-1 freetype - integer overflow

Bulletin has no description...

openSUSE Security Update : kernel (openSUSE-SU-2010:0664-1)

This openSUSE 11.2 kernel was updated to 2.6.31.14, fixing several security issues and bugs. A lot of ext4 filesystem stability fixes were also added. Following security issues have been fixed: CVE-2010-3301: Mismatch between 32bit and 64bit register usage in the system call entry path could be...

KLA10386 Multiple vulnerabilities in VMware

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to cause denial of service, inject arbitrary scripts, execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities 1. Insecure file...

[SECURITY] Fedora 12 Update: webkitgtk-1.2.4-1.fc12

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

Novell PlateSpin Orchestrate shell characters vulnerability

Shell characters vulnerability on graphs rendering...

[SECURITY] Fedora 13 Update: webkitgtk-1.2.4-1.fc13

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

Novell PlateSpin Orchestrate Graph Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Platespin Orchestrate. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application utilizes a bundled component for rendering graphs. Th...

CVE-2010-1781

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

Double free

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

CVE-2010-1781

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

PT-2010-3448 · Webkit +2 · Webkitgtk +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via vectors involving scrollbars...

PT-2010-3416 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: A double free issue in WebKit allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, through vectors related to the rendering of an inlin...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2010:0652 Updated ImageMagick packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...