CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

Design/Logic Flaw

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

CVE-2010-1904

SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...

CVE-2010-1904

SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...

CVE-2010-1904

RSA Key Manager (RKM) C Client 1.5.x is vulnerable to SQL injection via the metadata in encrypted data, allowing an attacker to manipulate the KeyTable/config caching data and potentially modify or delete encryption keys. The vulnerability arises from improper validation of metadata during key lo...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...

GLSA-201006-16 : GD: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-16 GD: User-assisted execution of arbitrary code Tomas Hoger reported that the gdGetColors function in gdgd.c does not properly verify the colorsTotal struct member, possibly leading to a buffer overflow. Impact : A remote...

GLSA-201006-14 : Newt: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-14 Newt: User-assisted execution of arbitrary code Miroslav Lichvar reported that Newt is prone to a heap-based buffer overflow in textbox.c. Impact : A remote attacker could entice a user to enter a specially crafted strin...

GLSA-201006-03 : ImageMagick: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-03 ImageMagick: User-assisted execution of arbitrary code Tielei Wang has discovered that the XMakeImage function in magick/xwindow.c is prone to an integer overflow, possibly leading to a buffer overflow. Impact : A remote...

GLSA-201006-01 : FreeType 1: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-01 FreeType 1: User-assisted execution of arbitrary code Multiple issues found in FreeType 2 were also discovered in FreeType 1. For details on these issues, please review the Gentoo Linux Security Advisories and CVE...

GLSA-201006-08 : nano: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-08 nano: Multiple vulnerabilities Multiple race condition vulnerabilities have been discovered in nano. For further information please consult the CVE entries referenced below. Impact : Under certain conditions, a local,...

Integer overflow

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Removed by vendor...

CVE-2010-2009

Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service application crash via a malformed packet trace file...

dvips -z buffer overflow with long href

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag...