Novell iPrint Client 'IppCreateServerRef()'远程缓冲区溢出漏洞

BUGTRAQ ID: 30986 CVE ID：CVE-2008-2436 CNCVE ID：CNCVE-20083536 Novell iPrint Client打印解决方案允许用户向网络打印机发送文档。 Novell iPrint Client包含的nipplib.dll存在边界错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于nipplib.dll的"IppCreateServerRef"函数中，传递超长特殊构建的字符串作为"GetPrinterURLList", "GetPrinterURLList2",...

openSUSE 10 Security Update : opera (opera-5537)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5537. The text description of this plugin is...

FreeType: User-assisted execution of arbitrary code

Background FreeType is a font rendering library for TrueType Font TTF and Printer Font Binary PFB. Description Regenrecht reported multiple vulnerabilities in FreeType via iDefense: An integer overflow when parsing values in the Private dictionary table in a PFB file, leading to a heap-based buff...

SWORD: Shell command injection

Background SWORD is a library for Bible study software. Description Dan Dennison reported that the diatheke.pl script used in SWORD does not properly sanitize shell meta-characters in the "range" parameter before processing it. Impact A remote attacker could provide specially crafted input to a...

Move Media Player qsp2ie07074039.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27995 Move Media Player是一款网络流媒体播放器。 Move Media Player的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Move Media Player所安装的Quantum Streaming IE Player ActiveX控件（qsp2ie07074039.dll）没有正确地验证对UploadLogs方式的输入参数。如果用户受骗访问了恶意网页并向该方式传送了超长URL参数的话，就可能触发栈溢出，导致执行任意指令。 Move Networks qsp2ie07074039.dll...

Pulseaudio: Privilege escalation

Background Pulseaudio is a networked sound server with an advanced plugin system. Description Marcus Meissner from SUSE reported that the padroproot function does not properly check the return value of the system calls setuid, seteuid, setresuid and setreuid when dropping its privileges. Impact A...

Fedora 8 : perl-Tk-804.028-3.fc8 (2008-1323)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...

Fedora 7 : perl-Tk-804.028-3.fc7 (2008-1384)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...

Debian Security Advisory DSA 866-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 866-1. Several security-related problems have been discovered in Mozilla and derived programs. For details, please visit the referenced security advisories. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions...

Fedora 7 : claws-mail-3.0.0-1.fc7 (2007-2009)

Mon Sep 3 2007 Andreas Bierfert - 3.0.0-1 - version upgrade - new license tag upstream switch to GPLv3+ - fix 254121 CVE-2007-2958 - Wed Aug 22 2007 Andreas Bierfert - 2.10.0-4 - new license tag - Wed Jul 18 2007 Andreas Bierfert - 2.10.0-3 - build against libSM 248675 - Mon Jul 16 2007 Andreas...

SOL4009 - Vulnerabilities in libpng - CAN-2004-0597, CAN-2004-0598, CAN-2004-0599

These vulnerabilities are described as methods under which an attacker could generate a PNG file that would cause applications that use libpng to execute arbitrary code. Since an attacker would require root access to the BIG-IP or 3-DNS in order to exploit this vulnerability, it is considered to ...

DSA-1275-1 zope2.7 - cross-site scripting

Bulletin has no description...

Adobe Flash Player: Arbitrary code execution

Background The Adobe Flash Player is a renderer for Flash files - commonly used to provide interactive websites, digital experiences and mobile content. Description The Adobe Flash Player contains multiple unspecified vulnerabilities. Impact An attacker could entice a user to view a malicious Fla...

Slackware 10.0 / 10.1 / 10.2 / current : Samba 2.0.23 repackaged (SSA:2006-200-01)

New Samba packages are available for Slackware 10.0, 10.1, 10.2, and -current. In Slackware 10.0, 10.1, and 10.2, Samba was evidently picking up the libdm.so.0 library causing a Samba package issued primarily as a security patch to suddenly require a library that would only be present on the...

MySQL: SQL Injection

Background MySQL is a popular multi-threaded, multi-user SQL server. Description MySQL is vulnerable to an injection flaw in mysqlrealescape when used with multi-byte characters. Impact Due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements...

[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-002 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-002 Project: Drupal core Date: 2006-03-13 Security risk: less critical...

GO-Global for Windows _USERSA_ Remote Overflow

The remote host appears to be running a version of the GO-Global remote display server that fills a small buffer with user-supplied data without first checking its size. An attacker can leverage this issue to overflow the buffer, causing the server to crash and possibly even allowing for arbitrar...

Malicious setRequestHeader cross-site vulnerability – Opera Security Advisories

Malicious setRequestHeader cross-site vulnerability – Opera Security Advisories OPCOM Team | September 29, 2005 Summary A malicious setRequestHeader can be used to stealuser credentials and inject cross-site JavaScript. Severity: high Opera’s response Since version 8.02 of Opera, double newlineso...

[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...

Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default

Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...