[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...

GLSA-201006-16 : GD: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-16 GD: User-assisted execution of arbitrary code Tomas Hoger reported that the gdGetColors function in gdgd.c does not properly verify the colorsTotal struct member, possibly leading to a buffer overflow. Impact : A remote...

GLSA-201006-14 : Newt: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-14 Newt: User-assisted execution of arbitrary code Miroslav Lichvar reported that Newt is prone to a heap-based buffer overflow in textbox.c. Impact : A remote attacker could entice a user to enter a specially crafted strin...

GLSA-201006-08 : nano: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-08 nano: Multiple vulnerabilities Multiple race condition vulnerabilities have been discovered in nano. For further information please consult the CVE entries referenced below. Impact : Under certain conditions, a local,...

GLSA-201006-01 : FreeType 1: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-01 FreeType 1: User-assisted execution of arbitrary code Multiple issues found in FreeType 2 were also discovered in FreeType 1. For details on these issues, please review the Gentoo Linux Security Advisories and CVE...

GLSA-201006-03 : ImageMagick: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-03 ImageMagick: User-assisted execution of arbitrary code Tielei Wang has discovered that the XMakeImage function in magick/xwindow.c is prone to an integer overflow, possibly leading to a buffer overflow. Impact : A remote...

Integer overflow

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

CVE-2010-2109

Removed by vendor...

CVE-2010-2009

Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service application crash via a malformed packet trace file...

dvips -z buffer overflow with long href

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag...

CVE-2010-1681

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256...

Code injection

Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file...

Stack overflow

Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename...

CVE-2010-1685

CursorArts ZipWrangler 1.20 is affected by a stack-based buffer overflow in ZIP processing, allowing a user-assisted remote attacker to execute arbitrary code by supplying a ZIP file containing a file with a long filename. Multiple sources (OpenVAS NASL, OpenVAS host advisories, and CVE records) ...

CVE-2010-1279: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file...

CVE-2010-0997

Cross-site scripting XSS vulnerability in 107plugins/content/contentmanager.php in the Content Management plugin in e107 before 0.7.20, when the personal content manager is enabled, allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the contentheading...

CVE-2010-1161

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files...