ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability

ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-295 October 18, 2011 -- CVE ID: CVE-2011-3222 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime...

Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

[SECURITY] Fedora 16 Update: kdeutils-4.7.1-3.fc16

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)

/ Mac OS X include include include include include void dummyfunc void asm volatile ".byte 0xff" ; int main void int ret; union ldtentry cgate, cgate2; char dummy128 = 0x00,; cgate.callgate.offset00 = unsigned intdummyfunc & 0xffff; cgate.callgate.offset16 = unsigned intdummyfunc 16 & 0xffff; //...

Ubuntu 10.10 : language-selector vulnerability (USN-1115-1)

Romain Perier discovered that the language-selector D-Bus backend did not correctly check for Policy Kit authorizations. A local attacker could exploit this to inject shell commands into the system-wide locale configuration file, leading to root privilege escalation. Note that Tenable Network...

Ubuntu: Security Advisory (USN-1115-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for language-selector USN-1115-1

Ubuntu Update for Linux kernel vulnerabilities USN-1115-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11151.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for language-selector USN-1115-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2011-1842

dbusbackend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the 1 SetSystemDefaultLangEnv and 2 SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different...

Design/Logic Flaw

dbusbackend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the 1 SetSystemDefaultLangEnv and 2 SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different...

CVE-2011-1842

dbusbackend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the 1 SetSystemDefaultLangEnv and 2 SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different...

CVE-2011-1842

CVE-2011-1842 affects the language-selector D-Bus backend (dbus_backend/lsd.py) where SetSystemDefaultLangEnv and SetSystemDefaultLanguageEnv do not validate shell-containing arguments, enabling local privilege escalation. The issue is tied to the same underlying flaw as CVE-2011-0729 (policykit ...

Design/Logic Flaw

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

CVE-2011-0729

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

CVE-2011-0729

CVE-2011-0729 affects the language-selector D-Bus backend (dbus_backend/ls-dbus-backend) in versions before 0.6.7. The component does not restrict access based on PolicyKit checks, allowing a local user to modify /etc/default/locale and /etc/environment via (1) SetSystemDefaultLangEnv or (2) SetS...

CVE-2011-0729

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

Fedora Update for kdeutils FEDORA-2011-5200

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: kdeutils-4.6.2-1.fc14

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

[SECURITY] Fedora 15 Update: kdeutils-4.6.2-1.fc15

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

[USN-1115-1] language-selector vulnerability

========================================================================== Ubuntu Security Notice USN-1115-1 April 19, 2011 language-selector vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

USN-1115-1: language-selector vulnerability

Romain Perier discovered that the language-selector D-Bus backend did not correctly check for Policy Kit authorizations. A local attacker could exploit this to inject shell commands into the system-wide locale configuration file, leading to root privilege escalation...