CVE-2008-2810: Undefined Security Weakness

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

Format string

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2309

The CVE-2008-2309 entry concerns Apple Mac OS X before 10.5.4, with an Incomplete blacklist vulnerability in CoreTypes. A user-assisted remote attacker could run arbitrary code by providing a .xht or .xhtm file, which would not trigger potential‑unsafe warnings in Mac OS X components: Download Va...

Directory traversal

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

CVE-2008-2942

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

CVE-2008-2942

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

CVE-2008-2942

Mercurial contains a directory-traversal vulnerability in patch.py (applydiff) that allows a user-assisted attacker to modify arbitrary files via ",.." sequences in a patch. The issue is tied to Mercurial 1.0.1-era code paths and can affect import/patch handling, potentially enabling file renamin...

CVE-2008-2942

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

CVE-2008-2942: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

GLSA-200806-10 : FreeType: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-10 FreeType: User-assisted execution of arbitrary code Regenrecht reported multiple vulnerabilities in FreeType via iDefense: An integer overflow when parsing values in the Private dictionary table in a PFB file, leading to...

GLSA-200806-05 : cbrPager: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-05 cbrPager: User-assisted execution of arbitrary code Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use...

CVE-2008-2712

CVE-2008-2712 affects Vim 7.1.314, 6.4 and other Vim versions as cited in connected advisories (e.g., MiracleLinux AXSA-2008-498:01). The issue allows user-assisted remote code execution via Vim scripts that do not properly sanitize inputs before invoking execute or system, with demonstrations us...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

Denial of service

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

GLSA-200806-03 : Imlib 2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-03 Imlib 2: User-assisted execution of arbitrary code Stefan Cornelius Secunia Research reported two boundary errors in Imlib2: One of them within the load function in the file src/modules/loaders/loaderpnm.c when processin...

Imlib 2: User-assisted execution of arbitrary code

Background Imlib 2 is an advanced replacement library for libraries like libXpm. Description Stefan Cornelius Secunia Research reported two boundary errors in Imlib2: One of them within the load function in the file src/modules/loaders/loaderpnm.c when processing the header of a PNM image file,...

Design/Logic Flaw

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist...